ba4926f00240c3852d2429c188edeeba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba4926f00240c3852d2429c188edeeba
Size

1.1MB
MD5

ba4926f00240c3852d2429c188edeeba
SHA1

18ce8cda017b918b2084580f4363590ee8f4fddc
SHA256

bb1523c4fb2768a11fd2abc7fce8d2016f339d7f4288deb1e54cfd975713729b
SHA512

4d4961cd8b703af10c5f7da9659a912b87df6ce80c8b60577427c00e1f84b92cebdc1afd7984a26f6e2772ee396e051b0b8e6927cff8c99ad8146958eae6848b
SSDEEP

12288:AUXm9k+HCbRCe2sqYlordoAgWPHYLs6eHT2OuRCl7A4EavGSEoEkxbo5LrsUqkth:AUXmBo/ugWvYDeHT/hA4VvhEFOYkIn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba4926f00240c3852d2429c188edeeba

Files

ba4926f00240c3852d2429c188edeeba
.exe windows:4 windows x86 arch:x86

a7bbbc378f55cacb51bd14de8bf21f2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleHandleW
GetCommandLineW
GetCurrentProcessId
GetSystemDefaultLCID
GetSystemDefaultLangID
GetCurrentThread
GetVersion
GetCommandLineA
GetUserDefaultLangID
GetCurrentProcess
GetTickCount
GetModuleHandleA
VirtualAlloc
InterlockedIncrement
InterlockedCompareExchange
GetCurrentThreadId
QueryPerformanceCounter
SetEvent
LoadResource
TerminateProcess
FormatMessageW

user32

ShowWindow
SetForegroundWindow
PeekMessageA
GetClientRect
EndDialog
GetSystemMenu

Sections

.text
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 814KB - Virtual size: 813KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ