ae0a0be2309cd241dea6e4a4994c78220c067856f00b45da0bb3d81d3472f149N | Triage

Sharing

General

Target

ae0a0be2309cd241dea6e4a4994c78220c067856f00b45da0bb3d81d3472f149N
Size

60KB
MD5

f7d92477d394b736e6d419bed88f93a0
SHA1

96a1ae79fbd12ca512dd23e64012ccefe11c90fa
SHA256

ae0a0be2309cd241dea6e4a4994c78220c067856f00b45da0bb3d81d3472f149
SHA512

d84f53db16f30b974e1abf75a6be7340616b6740a4a9914fe426de82f386753c23646c7d2469ba96c3713db853b5245dcd11fca7d8d6f74deba34c285b5691b6
SSDEEP

1536:t23iU4w8rY81GPtQRb3JbiNyOOZsQmZVXQ:t2yU4wWuS/OO+PTXQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ae0a0be2309cd241dea6e4a4994c78220c067856f00b45da0bb3d81d3472f149N

Files

ae0a0be2309cd241dea6e4a4994c78220c067856f00b45da0bb3d81d3472f149N
.exe windows:5 windows x86 arch:x86

7c96e3d48b6bb9c7b70fc87124a8b18a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ReadFile
SetConsoleActiveScreenBuffer
VirtualProtectEx
ExitProcess

user32

GetTopWindow
GetWindowRgn
GetUpdateRgn

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ