aecf518b9681b81e195f797332e6b1193c99472b88cf949e5df6d0f1c0d1140d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aecf518b9681b81e195f797332e6b1193c99472b88cf949e5df6d0f1c0d1140d
Size

72KB
MD5

45d0142ba9b17ecc2e3b4a8227f30735
SHA1

2d5d0b8dd3f9486aad44cd720449bd69dad29b89
SHA256

aecf518b9681b81e195f797332e6b1193c99472b88cf949e5df6d0f1c0d1140d
SHA512

c402df3190d8bbcf5189121baa25ba4160388171865e9c3d52c19ea53d3fae91367c74d8dd2c90127b57b3f6e4e20c28a4dea6239e0623ddc9728382082e7808
SSDEEP

768:x/nEuhThEUAvMgvvd9WhTOng8X6m2AYS1rg1YJZLIgwRdPxCdYLndQxzGp5hhJyG:xs0evMm+tgg1XS181xbGgdjhh9ZoP0T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aecf518b9681b81e195f797332e6b1193c99472b88cf949e5df6d0f1c0d1140d

Files

aecf518b9681b81e195f797332e6b1193c99472b88cf949e5df6d0f1c0d1140d
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE