1ba0efa141afec83b51885ec87b992cc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ba0efa141afec83b51885ec87b992cc
Size

2.8MB
MD5

1ba0efa141afec83b51885ec87b992cc
SHA1

972179e3248c686582b6171276823eea6c603aa0
SHA256

e091f15a6c9e8357ae7742ac7e54fb2dd6cdfafcce7a862d41c7f8558ef4278d
SHA512

f6df6ae859f285e00ed6ae43853fdbd980d2a80a1cbd250bf3d6e9ac7747ace5156632005022aeb2a033ce6f09b21f886576f0a18be8d7c8c4daba86a044f45f
SSDEEP

49152:jh+S9HmKKIa/LoevClMbTd2dyDIv4nw3Vx3PPGEg7zS2LO:jAytKTVTd2yDIv4e3nKW2LO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ba0efa141afec83b51885ec87b992cc

Files

1ba0efa141afec83b51885ec87b992cc
.exe windows:4 windows x86 arch:x86

d60648d2bf7794ed00331f522311aa1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
SearchPathA
SetFilePointerEx
SignalObjectAndWait
WaitForSingleObjectEx
VirtualAlloc

user32

DragDetect
ShowWindow

authz

AuthzInitializeContextFromToken

Sections

.text
Size: 743KB - Virtual size: 742KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 434KB - Virtual size: 433KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 98KB - Virtual size: 437KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ