uac[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

uac.exe
Size

212KB
MD5

24dd4507a901cf68c42a20f6c06f2f7e
SHA1

a7559dacda92cef0706d166bd02c8edfbe08c8ca
SHA256

22b53a44633dfdf78552f70bb72f12d753e5cc80041f793c25f3064cec02459e
SHA512

ffba3a1029e55349bb46d23f7394bf06e2be9bdba2fde76fd45851dece18cdc8f1f94462f63c96b268f12f58ef756a7c626e3b86d48ff9416ebe740aa66e9a65
SSDEEP

3072:BErx01wf7taT6YeNEjF9JNRVWAe/e7+Z68AYXQ60jQ1MiY:s3ajFHVteW7+c8POjapY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
uac.exe

Files

uac.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ