1ba3be7eedcb84500ac1132d159f7960 | Triage

Sharing

General

Target

1ba3be7eedcb84500ac1132d159f7960
Size

344KB
MD5

1ba3be7eedcb84500ac1132d159f7960
SHA1

c36c792d5ae56811de3edb0d48f0d8530cdf8894
SHA256

e165a351878f6abd194aa525e0ab35c9d99c4c296d484de942eb359ae19689d2
SHA512

8a2c6e504ae76dfa838de370ad9a4d76ff9fd18b5ff651b0d751e08cf44453d69472c0a3072b7a8f9f89d0dccc53f7f97925640ddd016831d176fde0faccb85f
SSDEEP

6144:rSQa0ZVcn2T/l6lMJ2iZVL56bJd2hG8RpZMCt4rbjaJLJIJ5d:rXa0ZWn270la2e5cmh/iCmfjaIJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ba3be7eedcb84500ac1132d159f7960

Files

1ba3be7eedcb84500ac1132d159f7960
.exe windows:4 windows x86 arch:x86

b5cb147a043775fa995dbb94670cd866

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetLastError
GetModuleHandleA
VirtualProtectEx
GetTempPathA
GetProcAddress

advapi32

ConvertSidToStringSidW

avifil32

CreateEditableStream

winmm

midiInClose

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 188KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ