ba58c1d892bb3f1289321da59fde8f61 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba58c1d892bb3f1289321da59fde8f61
Size

66KB
MD5

ba58c1d892bb3f1289321da59fde8f61
SHA1

6c69cfe1b92b69c8b35a9c497b6f86eede4acca8
SHA256

28dbdf197f8f900ef35fe643155af66cf33d0ea50ee79d47206a6aad264db645
SHA512

37971f82ac79027aa8f4d4e8073694e5f117785ea76d291eb85de22331361d75f757caf148563051f2ec41f9ba24499e24313d7c47f07556c28de3239feae166
SSDEEP

1536:jlc6xL36oe/tQ+lL03wGyaLpC5I3zK8B+DlTrw4R5iQ5j:jlvx2oitx5K1C5I3zeCqj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba58c1d892bb3f1289321da59fde8f61

Files

ba58c1d892bb3f1289321da59fde8f61
.exe windows:4 windows x86 arch:x86

bb4b899e64fe3e6b746e8b16a04463fd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FoldStringW
OpenWaitableTimerA
ReadFile
CallNamedPipeW
ReadConsoleInputW
EnumUILanguagesA
CreateTimerQueueTimer
DosPathToSessionPathA
WriteFile
GetCalendarInfoA
GlobalAddAtomA
GetProcessShutdownParameters

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE