7ba4b305ad04346de1c5ba735a4f9bea | Triage

Sharing

General

Target

7ba4b305ad04346de1c5ba735a4f9bea
Size

1.0MB
MD5

7ba4b305ad04346de1c5ba735a4f9bea
SHA1

9d577d723525f1b5758d69f0d6e6675fd5c4d8ff
SHA256

c2ffa24e229a098154262e353a468e0559bcb5805e986523c6f139b0fb73faf3
SHA512

e27d7c2e686b99b5633accb2775afba1dc392f50da9b99f91efb3d60ee61b4f46dc78318ff36c419e7ed1b2156e518c5210638648a09ab14f38526bcc859aef9
SSDEEP

12288:RBCgTEXObr78hwN7Es0s9TVNowtEwiBcUXKnF49zFEMpJBPM:dgXOf7FN7EsB9I0oKF4dDJB0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ba4b305ad04346de1c5ba735a4f9bea

Files

7ba4b305ad04346de1c5ba735a4f9bea
.exe windows:5 windows x86 arch:x86

6d4ff4c06f15fb6f3c0505892dd6d4ea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\inetpub\Temp\lrcf8in3t5s6r3m4pt12ekt4i2\Stub.pdb

Imports

msvcrt

_onexit
__dllonexit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
memmove
memcpy

kernel32

VirtualAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
GetModuleHandleA
LoadLibraryA
CreateThread
WaitForSingleObject
CloseHandle
GetProcAddress
VirtualFree
GetTickCount
GlobalAlloc
GlobalFree

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 703B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1006KB - Virtual size: 1005KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ