ba80af47679ae557e168485794fcd5dd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba80af47679ae557e168485794fcd5dd
Size

204KB
MD5

ba80af47679ae557e168485794fcd5dd
SHA1

c53916e0cca7bd943a2fbeb2b498fe5c882dd8ce
SHA256

d472b91247d4725430fe71444d2f7a927646477c57cec5be538178dd0fc4b295
SHA512

a177c5a8e01b10413d0b194f9e2ea1ae398be4c0d1453e9c642c334ff5fc9f4186bb5d8196114ff36f089c2e1e79f2fb359bef2f5180f29a8b4db6cdb1b7b1ee
SSDEEP

3072:W+cqBX+UdU4py2ffW5ZCXnsGmIb362s4mrN+yK0m6vkrCy:W9gXS4py2fgCcGm3FH4bX6x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba80af47679ae557e168485794fcd5dd

Files

ba80af47679ae557e168485794fcd5dd
.exe windows:4 windows x86 arch:x86

cf75be68bd5bc605170682908ec88172

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
VirtualAllocEx
GetModuleHandleW
IsBadHugeReadPtr
GetCommandLineA
ExitThread
IsBadReadPtr
GetProcAddress
lstrlenW
GetCommandLineW
LoadLibraryExA
ExitProcess
LoadLibraryA
GetLastError

Sections

.text
Size: 184KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ