aa7b2944ef2620685e8b62170d2a484220d3af11d95700bee743dd90954645df | Triage

Sharing

General

Target

aa7b2944ef2620685e8b62170d2a484220d3af11d95700bee743dd90954645df
Size

17KB
MD5

2862be684b61a14c7ac63fab092fc1d1
SHA1

08e21f1c2aa2cad02738c873b78a70c6a9709ae6
SHA256

aa7b2944ef2620685e8b62170d2a484220d3af11d95700bee743dd90954645df
SHA512

a7cbf8f264a2a5ce3aa96d552bf4b01917c70ea078d99906151c0d37fb37f1bb8c15f0ded1f7a82ed038cca15314edcb56358ffb243877971c700f0f9a52345a
SSDEEP

384:Mk93wqDfWTokai8BMEFVkXw66jmkDW9fWA:MW3wqiSAEFVd6ay

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa7b2944ef2620685e8b62170d2a484220d3af11d95700bee743dd90954645df

Files

aa7b2944ef2620685e8b62170d2a484220d3af11d95700bee743dd90954645df
.dll windows:4 windows x86 arch:x86

66bcde805743ef1f7a605bbdd59f0440

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
lstrcatA
GetSystemDirectoryA
FreeLibrary
GetWindowsDirectoryA
ExitProcess
CreateThread
DisableThreadLibraryCalls
GetCurrentProcess
Sleep
CreateMutexA
GetProcAddress

user32

GetWindowTextA
GetForegroundWindow
FindWindowExA
wsprintfA

msvcrt

fclose
fopen
printf
fscanf

Exports

Exports

CompareLinkInfoReferents
CompareLinkInfoVolumes
CreateLinkInfo
CreateLinkInfoA
CreateLinkInfoW
DestroyLinkInfo
DisconnectLinkInfo
GetCanonicalPathInfo
GetCanonicalPathInfoA
GetCanonicalPathInfoW
GetLinkInfoData
IsValidLinkInfo
MSCON
ResolveLinkInfo
ResolveLinkInfoA
ResolveLinkInfoW

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ