2aa06a1fb238af66aed65955fc0dc862d092ab09be0eda8c4eadac583105dff0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2aa06a1fb238af66aed65955fc0dc862d092ab09be0eda8c4eadac583105dff0
Size

4.5MB
MD5

7324e584d007e2ff5a6b7df02cf9f080
SHA1

ab1168fdc1657e2a6001eaa718f17b45960e5dca
SHA256

2aa06a1fb238af66aed65955fc0dc862d092ab09be0eda8c4eadac583105dff0
SHA512

fbc185e6cd220b3e7d191d8da3007ac830cf76aa8165a63566e9145dc8d5e43012010b63464ae19320e18acca39382d075071ef449b079ff5d5341e641e06f91
SSDEEP

98304:1Co877zL3wBtx6hhf3/FLOAkGkzdnEVomFHKnPUpewTcUQqorEE:1/87i0hfvFLOyomFHKnPUpewTpQqorEE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2aa06a1fb238af66aed65955fc0dc862d092ab09be0eda8c4eadac583105dff0

Files

2aa06a1fb238af66aed65955fc0dc862d092ab09be0eda8c4eadac583105dff0
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.ftsafe
Size: 793KB - Virtual size: 793KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE