05ba44aa845e43b8ccb0de858072f932 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05ba44aa845e43b8ccb0de858072f932
Size

22KB
MD5

05ba44aa845e43b8ccb0de858072f932
SHA1

c63059b7c1ef4ed91ecd1144a7a5218d57670e0f
SHA256

cbad66fe69c67bc9fbe296c7cc409804347370c81f1ea8070db97cb96a9bdb77
SHA512

0fa915993779cae8c110f46999ee3560a61d587e8606ee11d409571a67103022df07187c192032965a871909231dfd6416cc392702de877bc43d9a8c13206112
SSDEEP

384:sfj+4fUS7ee2AJQOVVFM1gdzNw26ulrJgRJ8iWQ3pY3E1iQoQiN6o3l:0+4fUle2AzVjdZqukR+iWS2Vh1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05ba44aa845e43b8ccb0de858072f932

Files

05ba44aa845e43b8ccb0de858072f932
.exe windows:4 windows x86 arch:x86

bb9328695206f602224cac41ddfd9a57

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

select

kernel32

CreateEventW

user32

MapVirtualKeyExW

gdi32

ExtTextOutW

advapi32

RegCreateKeyW

shell32

ShellAboutW

Sections

.text
Size: 1024B - Virtual size: 982B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ