ba6a5d002af40731cebe3270c4b2a23b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba6a5d002af40731cebe3270c4b2a23b
Size

271KB
MD5

ba6a5d002af40731cebe3270c4b2a23b
SHA1

749ee18859daac68851094933ebd4362996dc6ac
SHA256

e19b725f72e2bf395aab5fc84e3042b7406561648de9f2fd051fae90872524c0
SHA512

a026b0d7e780e73d4ece154fddd94dd4be6e21b7d84ef0a874b58d25e194342c595049f11e23a9c24d33a9d39d68de1b7d0cb3eacb3f78abe24225b9a039e3f2
SSDEEP

6144:GIsJENfT9HDSNFECg/D96KAyX6QfxrpcnSduCpu/hW7k+:GIHfThcoD9pmo7p4kp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba6a5d002af40731cebe3270c4b2a23b

Files

ba6a5d002af40731cebe3270c4b2a23b
.exe windows:1 windows x86 arch:x86

2b694bb045066a1289d0465deffa4a02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoCreateInstance

comctl32

ImageList_GetImageInfo

winspool.drv

OpenPrinterA

comdlg32

ChooseFontA

winmm

timeGetTime

shell32

ShellExecuteA

Sections

CODE
Size: 264KB - Virtual size: 800KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE