4aff22d9c71480940eed9bb57509913db5b45b58aede4f418f09753f53734cc4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4aff22d9c71480940eed9bb57509913db5b45b58aede4f418f09753f53734cc4
Size

91KB
MD5

b6e3f1a93bab723b880767a62a9914cf
SHA1

ccf878307838bf8c48c4b6b8f7a1d2a59c4e8cac
SHA256

4aff22d9c71480940eed9bb57509913db5b45b58aede4f418f09753f53734cc4
SHA512

93dddab48935b9216eb0d7dad4535e8b566ea1aa4f7e86b190b46de6108067fde8c188406daa322c4d563ef0fd108e004efcdf74e67a8db5de86c87535963a35
SSDEEP

1536:0f/Wvl433v4p8uZsgr7ccsxk4nAXFMt9URnX3eo1N/FghReSancUYWf3uHx:0HWN4nv4p8uy/cqLAs9URXuo1FFOranM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4aff22d9c71480940eed9bb57509913db5b45b58aede4f418f09753f53734cc4

Files

4aff22d9c71480940eed9bb57509913db5b45b58aede4f418f09753f53734cc4
.exe windows:4 windows x86 arch:x86

75caed3f0f8cc0c7bac20f46a5e5d8e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPackageFamilyName
CallbackMayRunLong
SetThreadSelectedCpuSets
GetAppContainerAce
IsThreadAFiber
GetConsoleTitleA
IsValidLocale
GetWindowsDirectoryW
K32EnumDeviceDrivers
GetEnvironmentStringsA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE