aca8246df4aac8f54145b03c14a4c24d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aca8246df4aac8f54145b03c14a4c24d
Size

19KB
MD5

aca8246df4aac8f54145b03c14a4c24d
SHA1

06af35e5e28298b2e07720df98ae1516426b57e8
SHA256

4310b8696f7b56d49062f2f8c178d8e9a39c2d613b193f1fa6bf0973a6ccac94
SHA512

1b5bf0dff286024800b4dfb30789334bf44648d88257f8a11e5bdef19fbabbc1efe701471953303ed1ad078ef9ff6ba966145733f09152a650c0249f1cce39e6
SSDEEP

384:J6hCLN/pEfwqyIosAZlb2w3KKWKf3aPfSvnipIp:J6hyH5qEqw3eKPa3/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aca8246df4aac8f54145b03c14a4c24d

Files

aca8246df4aac8f54145b03c14a4c24d
.exe windows:5 windows x86 arch:x86

51d1c369fcd10cf1479cc1476cff85cc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
ExitProcess
RtlUnwind
TerminateProcess
GetCurrentProcess
IsDebuggerPresent

user32

MessageBoxA

advapi32

RegOpenKeyA
RegOpenKeyExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 580B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ