aa3a5eff046d41423c7ed64fdddc1a6ce28f6e082ffc3d9d7e0755acfb16b168 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa3a5eff046d41423c7ed64fdddc1a6ce28f6e082ffc3d9d7e0755acfb16b168
Size

36KB
MD5

183e80861ef92e7a1a6197e23d2e07a4
SHA1

d054fdc738fc0b1ab3e9dfe4bfa2d264f8c1edc1
SHA256

aa3a5eff046d41423c7ed64fdddc1a6ce28f6e082ffc3d9d7e0755acfb16b168
SHA512

d0a36a79db317a1f353c95557cb9d7d45572a256dc8c1dae34e0201e0a405071eb27ff0579abc035f440401cf2a8e75e56cebc6463514259578d9769bf311cff
SSDEEP

768:G26uYRQRSm8/mjHgetHHz5fl2MOF3h1MuF:GVrRLveLgqnv2MYzMA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa3a5eff046d41423c7ed64fdddc1a6ce28f6e082ffc3d9d7e0755acfb16b168

Files

aa3a5eff046d41423c7ed64fdddc1a6ce28f6e082ffc3d9d7e0755acfb16b168
.exe windows:4 windows x86 arch:x86

4031e5d49f34c1eef26fe2b91cee7b63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetCommandLineA
GetModuleHandleA
LoadResource
LockResource
SizeofResource
ExitProcess

user32

CreateWindowExA
DefWindowProcA
DispatchMessageA
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
PostQuitMessage
RegisterClassExA
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ