ba9749d4b6e2ac65286bc1b627735828 | Triage

Sharing

General

Target

ba9749d4b6e2ac65286bc1b627735828
Size

25KB
MD5

ba9749d4b6e2ac65286bc1b627735828
SHA1

8a3aa23f05d8578b934c94b62c67efaa7a655676
SHA256

1fb792976d370e4d9611f377c776ef977da64f3614855aa2ac1e4148c0ce3233
SHA512

236dc04b22759b75452c73d55dc677d694584c739a10fcb1f2a94fdbec7d0f582242b98f46c17d72dfe8e32749201d3e82e256358816be76e2132fca6dcbf357
SSDEEP

384:C2LJi5IHM/vpGAIOmgU+h+xGDNVcYw6ra3qjRHPgaDB1LlThuZvibG:Fy/xGYmgJoGBemrdpgeB1RT+6bG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba9749d4b6e2ac65286bc1b627735828

Files

ba9749d4b6e2ac65286bc1b627735828
.exe windows:1 windows x86 arch:x86

e2c69898e19633e9830253504d1e2896

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ElfDeregisterEventSource
CryptGetKeyParam
FindFirstFreeAce
GetSecurityDescriptorDacl
GetTokenInformation

kernel32

ClearCommBreak
ConvertThreadToFiber
CreateEventA
CreateMutexA
DefineDosDeviceA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE