ba5315e2b50529f01481ceff0986a940

General

Target

ba5315e2b50529f01481ceff0986a940
Size

223KB
MD5

ba5315e2b50529f01481ceff0986a940
SHA1

f8a0a32b99d3f5c4d02e3a863eb7b211e475a06a
SHA256

e58a3fc90f2e0fe0469575ccde83cf5bc0f54da928b7e3b5900a0e70484de49a
SHA512

3e3b130e900a6f4c6f5d354d5af05932e43fd642c13c259d99d4676577c4e0aadce608ef43cc5270f396507642eee6393d1fbc8cae09d66051cfdd4b2ab5a96d
SSDEEP

3072:eMJSOr8FxSFY3sfo7hBdI1f3KJixG/Q1kdZKdt6sLzN4Oxddgx+VgHOaW4T8oq0E:fxggY3sqa1/i/Q1kTaVLbddgxTI0E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba5315e2b50529f01481ceff0986a940

Files

ba5315e2b50529f01481ceff0986a940
.exe windows:4 windows x86 arch:x86

987258c3219d191c07f010304eb578fc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

GetWindowRect
GetLastActivePopup
IsIconic
SetRect
EnumWindowStationsW
ShowWindow
SetForegroundWindow
GetClientRect

dciman32

DCIBeginAccess

kernel32

GetProcessHeap
FindClose
GetUserDefaultUILanguage
GetCommandLineA
GetSystemDefaultLangID
GetModuleFileNameW
EnumSystemLocalesW
SetStdHandle
GetShortPathNameW
CloseHandle
FindFirstFileExA
FindFirstFileExW
GetLocaleInfoW
GetTempPathW
FindNextFileW
ExitProcess
GetFullPathNameW
GetVersionExW
OutputDebugStringA
lstrlenA
Sleep
GetModuleHandleA
CreateFileMappingA
lstrlenW
GetFullPathNameA
GetModuleFileNameA
FindNextFileA
OutputDebugStringW
GetUserDefaultLangID
EnumUILanguagesW
GetShortPathNameA

shell32

SHCreateDirectoryExA
SHGetSpecialFolderPathA
SHGetFolderPathW
SHCreateDirectoryExW
SHChangeNotify
SHGetSpecialFolderPathW

Sections

.text
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edit
Size: 5KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

987258c3219d191c07f010304eb578fc

Headers

File Characteristics

Imports

user32

dciman32

kernel32

shell32

Sections

.text Size: 220KB - Virtual size: 220KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 84KB - Virtual size: 84KB

.edit Size: 5KB - Virtual size: 70KB

.text
Size: 220KB - Virtual size: 220KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 84KB - Virtual size: 84KB

.edit
Size: 5KB - Virtual size: 70KB