0ba53c8a9f0da73f2d043da833df1b8b | Triage

Sharing

General

Target

0ba53c8a9f0da73f2d043da833df1b8b
Size

50KB
MD5

0ba53c8a9f0da73f2d043da833df1b8b
SHA1

23c1ebfec9c5e3150ad42a2e639be44b22395cab
SHA256

3051d3e3faf3ba4530235a5a1a9f4dfe61b0f2d3fa7e409baf29b1d141c56c12
SHA512

c0fcf3baa69f484ca388682bed4d532753d87180b4a2f7586854df628f3827ea89a5ee914bc9d69539fda29593e296c67b37ea305eb88c79aa55aa3083ff9e36
SSDEEP

768:YW8X769YgFYx173yoof1tuTBudWrCrflC9bXBEjYYrOAQ9HIlZ1:Mr69Yr17Coof1sBaWrmdCJBapKHIlZ1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ba53c8a9f0da73f2d043da833df1b8b

Files

0ba53c8a9f0da73f2d043da833df1b8b
.exe windows:4 windows x86 arch:x86

b243edccd4f418b8066a80c240fa34f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

ExtFloodFill
Pie
SetWindowExtEx

advapi32

OpenSCManagerA
OpenServiceW
AllocateAndInitializeSid
UnlockServiceDatabase
RegCreateKeyExW
RegDeleteKeyA
RegQueryValueExW
SetServiceStatus
LockServiceDatabase
RegQueryValueW

version

GetFileVersionInfoA
GetFileVersionInfoW
VerQueryValueA

kernel32

VirtualAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
SetLastError
CloseHandle
GetVersionExA
LoadLibraryA
SearchPathW
ExitProcess

msvcrt

strrchr
fread
tolower
_ftol
strstr
_acmdln
swprintf
_read
??3@YAXPAX@Z
isalnum
__set_app_type

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 18KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 15KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE