eaa1373f106f91b15f79a54e5f40ebb535ee4cfb12dd59c93a53f4080fbf707b | Triage

Sharing

General

Target

eaa1373f106f91b15f79a54e5f40ebb535ee4cfb12dd59c93a53f4080fbf707b
Size

62KB
MD5

aa9f585fbd63bda20aeb426bb0d7a559
SHA1

736fc6ea24807539435fe09b0cf5447cdb1c1ec4
SHA256

eaa1373f106f91b15f79a54e5f40ebb535ee4cfb12dd59c93a53f4080fbf707b
SHA512

b2efb790f90d7539ecab85ef5c35677857c7a8eae4dd1da79a60eb7edce9598787d5337e69a93f3dc26e0377a7e6fee0d80cd021a8f00ed6f23efd1724a440ad
SSDEEP

1536:cPd41jAPQIjSfh708cgnzNgdZ8IhFOTUSOaLC1u3j600F8cr:cW1s4ASNrnhUZ8IeCWpcr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eaa1373f106f91b15f79a54e5f40ebb535ee4cfb12dd59c93a53f4080fbf707b

Files

eaa1373f106f91b15f79a54e5f40ebb535ee4cfb12dd59c93a53f4080fbf707b
.exe windows:4 windows x86 arch:x86

a379c99d80ad08a6bb300564bd256a0e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemWow64DirectoryA
TransactNamedPipe
FindAtomA
OpenMutexA
CompareStringOrdinal
SetFileAttributesW
CreateJobSet
EnumResourceNamesExW
EnterCriticalSection
GetFileBandwidthReservation
GetFileMUIInfo

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE