ajKmuwbzMWvFxqIh[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ajKmuwbzMWvFxqIh.exe
Size

1.3MB
MD5

dfb1f5221ff58d592fa820f9b4c81f24
SHA1

cbb9104be62189206242cab0d66e6716432ece71
SHA256

5896630e7d5a6253b4152eb14bcd69a430f3d1945759e0177fff7e98e92b8ec3
SHA512

b3998994d5107d29fcc66e386437155e223e6efd68198456e2b9618f002ae68fb77207c5d7c8a21e1b41447ccd11ce13f5cab58fccff1e1861628f07434c75ce
SSDEEP

24576:QnD0S6256pc/tN5rUwtY0LUwsX9KZRG0vMss9JSFiPt0QEwcMs3ZWV5W/S1E+rip:7g5Wc/t3/tYpR9K3vMdGiPt0HRpWV5Pg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ajKmuwbzMWvFxqIh.exe

Files

ajKmuwbzMWvFxqIh.exe
.exe windows:6 windows x64 arch:x64

6b8fd782e0693913ba9f1f20e16c9423

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

PeekMessageA

kernel32

GetModuleHandleA

shell32

SHGetDiskFreeSpaceExW

advapi32

RegCloseKey

Sections

.pexe
Size: - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pexe
Size: - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE