ba0bdef3bd7b90acd8243d2ba1a2d49c | Triage

Sharing

General

Target

ba0bdef3bd7b90acd8243d2ba1a2d49c
Size

8KB
MD5

ba0bdef3bd7b90acd8243d2ba1a2d49c
SHA1

17af181ef3224f5d6515eb1ab3898670d6d886a6
SHA256

345f611198341fd80aec50ff15d941792e4ffd3037f14f40ebe1088a8c80eee9
SHA512

832bc33efec0367301655a53373982b402a3416d832cfa179f99961e74ddf49befc6bce616aedf241a0d2abee9e8c325f093c7bc953c28f7af336f6615494045
SSDEEP

96:XHdubdB19fH3OF8oJEydejVRvx7rJhQBr01GqD3bDr7EhQJZevEVxHRvlgmdTBmn:X9y9yZJEoEVN+vqTCvqbvlvTBW7le

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba0bdef3bd7b90acd8243d2ba1a2d49c

Files

ba0bdef3bd7b90acd8243d2ba1a2d49c
.exe windows:4 windows x86 arch:x86

b0359257853ecb4c9fbd38a625715066

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDriveTypeA
WinExec
GetCurrentThreadId
GetTickCount
GetTempPathA
CreateThread
lstrcpyA
GetPrivateProfileStringA
CopyFileA
DeleteFileA
lstrcatA
GetSystemDirectoryA
GetModuleFileNameA
CreateProcessA
VirtualProtectEx
GetCurrentProcess
GetLastError
CreateMutexA
GetCommandLineA
LoadLibraryA
GetProcAddress
Sleep
GetVolumeInformationA
CreateDirectoryA
lstrlenA

advapi32

RegDeleteKeyA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA

msvcrt

fopen
sprintf
malloc
strstr
_strlwr
fclose

Sections

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE