ba62cb1a4c907f507f089b211c570b1e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba62cb1a4c907f507f089b211c570b1e
Size

100KB
MD5

ba62cb1a4c907f507f089b211c570b1e
SHA1

99729c7fe09e98d7aa2ddb8306f0a3d4fd28724b
SHA256

fbf40e3adcac9dbb97351e0335e09264106e2f66ed56cce18efd2476e3750b13
SHA512

4b479e137b56a30fd2ce4e9bfb1b9dfdd3b6d1a4222597498ac6f4f55552442519ec7c8d47598a0576efcd62d23dfd02bf27f63809d52a2cc5d81798bb79ae6c
SSDEEP

3072:ZtV8UHVCBZTH/Ej1vgxZtFOJD045A0WA1sb:xHV+JstgxjMdc0WD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba62cb1a4c907f507f089b211c570b1e

Files

ba62cb1a4c907f507f089b211c570b1e
.exe windows:4 windows x86 arch:x86

f6fa93597a4536dfedd81a900d1e9576

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLDownloadToFileA

wininet

DeleteUrlCacheEntry

msvcrt

_controlfp

kernel32

GetStartupInfoA
LoadLibraryA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

advapi32

RegSetValueExA

shell32

SHGetSpecialFolderPathA

ole32

CoCreateGuid

shlwapi

PathFileExistsA

Exports

Exports

?Dll2Main@@YGHPAUHINSTANCE__@@KPAX@Z

Sections

.text
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bad0
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

.bad1
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ