ffbba6defab5bc3f513a748036f2c8e0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffbba6defab5bc3f513a748036f2c8e0
Size

128KB
MD5

ffbba6defab5bc3f513a748036f2c8e0
SHA1

c57ca550bb90db056979e5ab23745c71aa45491d
SHA256

eb0146a6725ebd18736c70fccedc9a22b06fe179c707c8be03ac99302bc3e2e7
SHA512

f3522b631e8e6ccd542a33f58491101e76d61379471e7bcf8d6ce84265efe691a6d5d588bc5e86dab04c46056c7f10b844853f993f6f86f47b285ff6b51662d9
SSDEEP

3072:OQbfCJLeS+B20Abgj19++L3R2NmzpEycusQd9HiTo:j6JnwA+Om96yczQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffbba6defab5bc3f513a748036f2c8e0

Files

ffbba6defab5bc3f513a748036f2c8e0
.exe windows:4 windows x86 arch:x86

f8dfa9accaddfca3654faee73e63152c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetErrorMode
SetConsoleIcon
GetACP
CreateTimerQueue
GlobalUnlock
GlobalAlloc
FatalAppExitA
WaitNamedPipeA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

rc60
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rc61
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rc62
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

rc63
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ