ba13a27964162e2d9b58c5b9f79bc6e0_exe32[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba13a27964162e2d9b58c5b9f79bc6e0_exe32.exe
Size

315KB
MD5

ba13a27964162e2d9b58c5b9f79bc6e0
SHA1

75312e4d90d3d1884656508301a92fd0e49e9ce6
SHA256

06eb02d43fbd7407bee86031e77348d393e32a7e5dafe9c05964f9706e2d324e
SHA512

294e15228aba960d1a61797b18207c6057b17b272827ad7194ef044ad798b827aa861342c1b67aafd45374a0b6c7bfbff4db2c4fb3c68c8c99210f11d3a1ff67
SSDEEP

6144:HIJsyBGAEiQPBVRzPivYJoBuYXb94oIMdd8vfZ50Mhibw4OiF:BVAWNDTJHq9DIMTW8c1iF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba13a27964162e2d9b58c5b9f79bc6e0_exe32.exe

Files

ba13a27964162e2d9b58c5b9f79bc6e0_exe32.exe
.exe windows:5 windows x86

3b3ca5844bdb8b6b333c1e673e18f1c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

GetDC

advapi32

RegCloseKey

shell32

ShellExecuteW

ws2_32

gethostbyaddr

iphlpapi

GetAdaptersInfo

oleacc

LresultFromObject

gdi32

SaveDC

winspool.drv

OpenPrinterW

oleaut32

VariantClear

Sections

IOKGDTTY
Size: - Virtual size: 488KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

IOKGDTTY
Size: 309KB - Virtual size: 312KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE