0ba8afea78b1f8fe7aeb04f71b393197 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ba8afea78b1f8fe7aeb04f71b393197
Size

315KB
MD5

0ba8afea78b1f8fe7aeb04f71b393197
SHA1

b09724ae1d7e2bfb17fed0acdaadc83834acb609
SHA256

4ad041e37821b5494176a5121a3763a0e22cda5784c0616c5071abdac46e25dd
SHA512

cadb6c6d50603595dd547ee97d71717d6254b94d691575765e14d0d02385b3ada94771e1e96695efdc63f8f3235244102cb6cb29c3ff25c330650238b997978b
SSDEEP

6144:WuhYpygHYpU5g1wDnday0ZCy6dgE6OI6ZBjBriwynRX0:fhYpdH44g1wDnoy0Ay6yE6r6LjBuwyne

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ba8afea78b1f8fe7aeb04f71b393197

Files

0ba8afea78b1f8fe7aeb04f71b393197
.exe windows:5 windows x86 arch:x86

f726bd7f1f33fe7f5b219a2a5b49f3c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
CreateNamedPipeA
GetProcAddress

Exports

Exports

bibmnjfmxa
hhpfygbl
iijpuztxpuwc

Sections

.text
Size: 301KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ