ba852aee2d05e2d78d2fdcadd6b8bd62b5f9da7639a99fa74a6bfcb98a706ac8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba852aee2d05e2d78d2fdcadd6b8bd62b5f9da7639a99fa74a6bfcb98a706ac8
Size

432KB
MD5

ad3e87e9452e7c0fada0f65aae3fc6f1
SHA1

f192431ff0077096a793420ef29001c8ff48e994
SHA256

ba852aee2d05e2d78d2fdcadd6b8bd62b5f9da7639a99fa74a6bfcb98a706ac8
SHA512

013acf70d981512cb1b376070da121095a16ca47b8107a750bbbe8622422190fae18e2c4b32667c8d0b863df69d4077ec2ca5c315351f73044ab07e82a1b5c46
SSDEEP

12288:GpHDjnc/fDXgfA3gfoJWTB7kSeHRQa3Rvh:gHc/LwfA4oJWdYdh

Score

N/A

Malware Config

Signatures

Files

ba852aee2d05e2d78d2fdcadd6b8bd62b5f9da7639a99fa74a6bfcb98a706ac8
.exe windows x86

0201db5e3d413a8ac6d3e84340943339

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

QueryServiceLockStatusW
GetNamedSecurityInfoExA

kernel32

GetCurrentThread
RegisterWaitForSingleObjectEx
GetSystemDefaultLangID
GetConsoleWindow
CreateDirectoryA

Sections

.text
Size: 429KB - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 378B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE