a1ba8729d6e89df09910ff664fe9a917 | Triage

Sharing

General

Target

a1ba8729d6e89df09910ff664fe9a917
Size

76KB
MD5

a1ba8729d6e89df09910ff664fe9a917
SHA1

0c07887192152d1f18c86363e39b0da773a4dece
SHA256

21eb138b002177a37c915efeec7253cea00cfbe838707f697519b5ffdc6eb90f
SHA512

6309af1dae31b66214a7d7ad5e895e084c0d8973eedd8e93a796e74eba93aeae079856942aca2a6317a54f4f5a00e625d99f93c72f63f3b2d92b9532ffb072f6
SSDEEP

1536:hDTTq3vri12zjdrZiwyOzsXz6pp/nAq86wXgaWibh7XJempjVrs2ryrd1vUQuq6:hPOOUzJZiwgXz6jnAx6wsM7JemHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1ba8729d6e89df09910ff664fe9a917

Files

a1ba8729d6e89df09910ff664fe9a917
.exe windows:4 windows x86 arch:x86

b8aab3f8f0bbc8f2e50f3c3ab6a9589c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextChangeNotification
WriteConsoleInputW
WriteConsoleInputA
SwitchToThread
IsBadCodePtr
SetVolumeMountPointA
EnumResourceLanguagesA
ActivateActCtx
SetConsoleTitleA
EnumResourceNamesW
GetConsoleFontSize

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE