0ba19249c0ec768a926cfbe5bb5ddfe9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ba19249c0ec768a926cfbe5bb5ddfe9
Size

226KB
MD5

0ba19249c0ec768a926cfbe5bb5ddfe9
SHA1

8f16b505d39fa96e65306a44d6f169fa05e01e5f
SHA256

7b8b4015c89077558a7fb5706ee2da2440b2a22b585e0f3b02c787a0498fcd66
SHA512

aef9aae77dba65dd8237af4203b91b58dee488078c1929ebe2fce4e4d6867201ce4b7882e23a582861f70deb5917616067a8cd1af5d1942c297e51eb5ee5b861
SSDEEP

6144:EOiV5roFkOkyqBT8mb5yiJPrXacuDFP7u3ZIixpEfVl:SQFpET8JiJPzuDF6V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ba19249c0ec768a926cfbe5bb5ddfe9

Files

0ba19249c0ec768a926cfbe5bb5ddfe9
.exe windows:4 windows x86 arch:x86

b71d8c1931cb0a297806c1529ed52c6b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 223KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ