3ba0984cb2e68f7fa04e22e5eb855ea9 | Triage

Sharing

General

Target

3ba0984cb2e68f7fa04e22e5eb855ea9
Size

831KB
MD5

3ba0984cb2e68f7fa04e22e5eb855ea9
SHA1

a722d5f106243600488ccf73334574bfa24755ef
SHA256

29a0ad0460614fd76129ba010f57cf18daa15a1ca9ddada2d18a3055a0f8abc1
SHA512

469fec7d40c9cd2d4c255a5413aa6d9b92e696b5af1010220da97fa2f6f239ee988cfa1ab09ed8d84a650db6db9c4e43aeca5d9bf169ad323a0f1c296b3cf57f
SSDEEP

12288:hbvHezzkKs4xgZa8seHvjN+302oEY+IYFuJFEEMJNSDP5:hbPecKxSa8fvJ+35UlWd0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ba0984cb2e68f7fa04e22e5eb855ea9

Files

3ba0984cb2e68f7fa04e22e5eb855ea9
.exe windows:5 windows x86 arch:x86

a8a0812c4f4545858e643c0bc4a7834c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
GlobalAlloc
GetTickCount
HeapFree
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
HeapAlloc
CreateFileA
ExitProcess

shell32

SHGetDesktopFolder

iphlpapi

AddIPAddress

secur32

CompleteAuthToken

powrprof

GetPwrCapabilities

Exports

Exports

antiemu30

Sections

.text
Size: 821KB - Virtual size: 820KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bdd
Size: - Virtual size: 50KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 809B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ