acaa23dd12d5992e239cba15615b38e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

acaa23dd12d5992e239cba15615b38e2
Size

191KB
MD5

acaa23dd12d5992e239cba15615b38e2
SHA1

f01a9488394cc86f57d6235de2c5136df3d7a279
SHA256

334a44e276c4e8740854c90e05c6469bf0b4f9c2ae8339dd384506648881530e
SHA512

7ef9f1519b4bd0121066886cdd0e76ede8511179941268b7929e24164260ecef942dcc06e62b9fa9ae17984352ffbd3f8f63146c83ecc9986f0a30382038c4c8
SSDEEP

3072:n35eUyT8JoL3PU8cjpqU7P15O/gdE9yHdhdtSZh3aHUVGJ2m2NlVxWD/U:n35eY8c9qG5fiA94Zh3zoDLc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acaa23dd12d5992e239cba15615b38e2

Files

acaa23dd12d5992e239cba15615b38e2
.exe windows:5 windows x86 arch:x86

330dfc1f544851584464f087f1b1bc78

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

L:\ojwuPrOxnajfp\owPhptprknsf\thuuqDmzpfIk\sXocPcadcxovcA.pdb

Imports

kernel32

GetUserDefaultUILanguage
GetSystemInfo
GetProfileIntA
GetPrivateProfileIntA
SetSystemTimeAdjustment
lstrlenA
DeleteCriticalSection
CreateFileW
lstrcmpiW
GetDateFormatA
GetProfileIntW

shlwapi

PathUnquoteSpacesW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

user32

MessageBoxW

shell32

ord196

Exports

Exports

?MegaUploaderFunc@@YGKXZ

Sections

.itext
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE