aec6e39f5b0bc52234bd87a3526df24ec816a42ae247e634ce0820887386af9a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aec6e39f5b0bc52234bd87a3526df24ec816a42ae247e634ce0820887386af9a
Size

32KB
MD5

42ad79ee7bbb5d73a324043cbf080942
SHA1

27a937e3da4f407c461d8a73c34df3d57b6a0b91
SHA256

aec6e39f5b0bc52234bd87a3526df24ec816a42ae247e634ce0820887386af9a
SHA512

8f1ccbb2383b6dc97747ccdcbe7bc4d45b6c1600d07ae33ad6d86082f5ad959a0807f9fc1ae7a62328a03557023dc46cc7ffbbcb9d8e5c9f47fae6ea78a3a0ec
SSDEEP

384:ry26utT4Dq8RX5OSNyCdvQ0KKsGbcH5wk50P/miY0sRxHgHhbi1g9Vwj5FjZmSUB:G26uYzQhmWSm8/mjHgH9OAwj5FZOd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aec6e39f5b0bc52234bd87a3526df24ec816a42ae247e634ce0820887386af9a

Files

aec6e39f5b0bc52234bd87a3526df24ec816a42ae247e634ce0820887386af9a
.exe windows:4 windows x86 arch:x86

4031e5d49f34c1eef26fe2b91cee7b63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetCommandLineA
GetModuleHandleA
LoadResource
LockResource
SizeofResource
ExitProcess

user32

CreateWindowExA
DefWindowProcA
DispatchMessageA
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
PostQuitMessage
RegisterClassExA
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ