aaa[.]exe | Triage

Sharing

General

Target

aaa.exe
Size

149KB
MD5

3d2739b6db356076ff403d1894488e0a
SHA1

9a5b9a171c84022a295617f0abe0a28d4cbf1490
SHA256

530fb8b9a65df5bf633a5dc8d71bd88e60467a57f7579e8c8507c28bf20ac146
SHA512

e8fe7979f61ae37dc806b57525692a8fed62ee21bbe797a994f99718b5424d476af3a57c50f1dff7fecc111a9323c2601a5885ed08a9fbf8e0f6479f3b3d0242
SSDEEP

3072:V5KFwkerGanuj1Geh+zg0oF/k4wFdbPXVXQyvHTeaoFU:V5qwLGauj1/yg3adbPXVXQyvX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

aaa.exe

Files

aaa.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ