013ba071e62c4409512c114428b09906 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

013ba071e62c4409512c114428b09906
Size

181KB
MD5

013ba071e62c4409512c114428b09906
SHA1

1ad87cd3fefc522dc67652ccc0d7295265aa1ddd
SHA256

b4a7d9935f1ed8238397537341cd8e296e4c6e01602fae443bcf04396597f710
SHA512

baf0054bf368b501b49064ccd9b9138e3543342d9b853b44cf37d7a5d80c736e229dc326f1001bbbf8625a56b5ff97cce0e4494df52ca712cfc6f23950fcc2a5
SSDEEP

3072:rZYHeZQJ2oFeabbK0Ge3HKLO7N9czh1HpHXUzZcFXOwM68FesLqXpKXEaUiM:tNM9hHKaN9E1JHXU1K3Ua5OM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
013ba071e62c4409512c114428b09906

Files

013ba071e62c4409512c114428b09906
.exe windows:4 windows x86 arch:x86

64deb1175c9d8ea769af9c4aa60010c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnregisterWait
SetupComm
CreateFileMappingW
LoadLibraryExA
GetVolumeInformationW
GetLongPathNameW
HeapSize
GlobalUnlock
VerifyVersionInfoW
GetCommandLineA
ExitProcess
GetStartupInfoA

user32

MoveWindow
PackDDElParam
GetSysColorBrush
ScrollChildren
CharPrevA
DdeClientTransaction
IMPQueryIMEW
SendMessageA
BringWindowToTop
InitializeLpkHooks
SendInput
IsDialogMessageW
CtxInitUser32
ChangeClipboardChain
GetWindowTextLengthA
DrawCaptionTempA
SwitchToThisWindow
SwapMouseButton

Sections

.code
Size: 5KB - Virtual size: 811KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 172KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE