ba784323223bca4efdec88cfb2250b3d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba784323223bca4efdec88cfb2250b3d
Size

22KB
MD5

ba784323223bca4efdec88cfb2250b3d
SHA1

22f2ff1f190ede4a74e4f882a32eb02a8cf5c099
SHA256

ad64a0786c94bc3be7f7a2b3f75dee6fcaab913eb6981a4671de6d997f146b47
SHA512

69981490383ebbbe2cb7315484e199960a10fc7ba8beca2706e8215283156b2d60584cc80354fadd6c4ddb97afdaa9301a3328e197a7fa365b1e6a6809f0ee55
SSDEEP

384:6a4Ga3aoc+5N0BaZMm34YBcgMMMI7iYZW94x:2G3g0gZMm3BMMMIO/+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba784323223bca4efdec88cfb2250b3d

Files

ba784323223bca4efdec88cfb2250b3d
.exe windows:4 windows x86 arch:x86

a86023318f45c5c2dc42a509cd9290ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
lstrlenA
GetLastError
ResumeThread
CreateProcessA
SetThreadPriority
GetCurrentThread
ExitProcess
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
CopyFileA
LoadLibraryA
FreeResource
GetSystemDirectoryA
FindResourceA
SizeofResource
LoadResource
LockResource
GlobalAlloc
CreateFileA
WriteFile
CloseHandle
SetPriorityClass
GetStartupInfoA

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA
StartServiceCtrlDispatcherA
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
CloseServiceHandle
RegisterServiceCtrlHandlerA
SetServiceStatus
RegOpenKeyA
RegSetValueExA
RegCloseKey
RegOpenKeyExA

msvcrt

sprintf
strstr
strncmp
_except_handler3
exit
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp

Sections

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ