aa13b44595e07dfd15b58a61891ac820N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa13b44595e07dfd15b58a61891ac820N.exe
Size

213KB
MD5

aa13b44595e07dfd15b58a61891ac820
SHA1

8d0b413606910323484675cea73d3a66d105d803
SHA256

614c62447d1b09818e0f7a2edc5b2078cb901e7106c614212c9f5c3fe8823f48
SHA512

e2bdd8c77286001ae567f73e3aca9061dccf90fe5b7622b0f5fc49d5420718f4a662d26eeda24626ded7424761a5520049a88d11dcfd1dc0b8ab8f4e24693d35
SSDEEP

6144:ztvBPnU1b7e9SQii1EkoNlhlrQ2ZrM2x:Zv1nWdQP1EDhZPx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa13b44595e07dfd15b58a61891ac820N.exe

Files

aa13b44595e07dfd15b58a61891ac820N.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

GVD0
Size: - Virtual size: 18.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

GVD1
Size: 205KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE