aaf281594c7353631aa56b9af24bb5da3b8665f36dfba7244fb313242c830fd2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aaf281594c7353631aa56b9af24bb5da3b8665f36dfba7244fb313242c830fd2
Size

53KB
MD5

32ac2eea2ba44c8b434e1f402e854d56
SHA1

79dbc0afc2459c92201d8dd2622060468a130a8e
SHA256

aaf281594c7353631aa56b9af24bb5da3b8665f36dfba7244fb313242c830fd2
SHA512

72384c1070fcd402ef1c8b9623b9c8239c56e131c7f116084c7a261607dbc68d648820a17b13e51a07b585cbc495f14c074908da2a4c96e9afb3e6f552a2aecd
SSDEEP

1536:q+vjNmnVojXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8LYD3DZFYilQNAgqau:q+vjNwVojXRrs9sINeZEtejlIkoLN12I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aaf281594c7353631aa56b9af24bb5da3b8665f36dfba7244fb313242c830fd2

Files

aaf281594c7353631aa56b9af24bb5da3b8665f36dfba7244fb313242c830fd2
.exe windows:1 windows x86 arch:x86

683692d4746aa100a2b6043db7fe5945

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageW
EndDialog
GetDlgItem
DialogBoxIndirectParamW
wsprintfW

kernel32

HeapAlloc
GetProcessHeap
GetModuleHandleA
lstrcpyW
ReadFile
CreateFileW
HeapFree
CloseHandle
GetFileSize

comctl32

ord17

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ