acae3540600608faa81db570d1a74f63 | Triage

Sharing

General

Target

acae3540600608faa81db570d1a74f63
Size

165KB
MD5

acae3540600608faa81db570d1a74f63
SHA1

a52ba463142d9f40bc1f4467a62316f2b82ba6c3
SHA256

a6de7be448775fb18bbb113666c16214de0d931ea42a451f0931daaa57a78b80
SHA512

5f7081c4810ee315dca7ea6abd626d477734b3c770d991e57ab5f7bcc234063ddd337a004511920d37d7e75ab729756efc16ba2b9aa60f24e92c7fd5eeee21ed
SSDEEP

3072:m4jIMO4Ga4iq8yJg1bqetbhWBC8fj6g7S1xWsasTR0:m4jI1l/Jg1btbMBd6g7SCXst

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acae3540600608faa81db570d1a74f63

Files

acae3540600608faa81db570d1a74f63
.exe windows:5 windows x86 arch:x86

1e3267f66decac80637a2ecf95ce58e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDesktopWindow
CharNextA

kernel32

VirtualAlloc
RtlMoveMemory
OpenProcess
GetProcessHeap
VirtualFree
lstrcmpiA
SetCurrentDirectoryA
RemoveDirectoryA

Sections

.text
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Qnhqpbsa
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ