ba9900fb4f2b6deadfa0cb41d9139e8d | Triage

Sharing

General

Target

ba9900fb4f2b6deadfa0cb41d9139e8d
Size

37KB
MD5

ba9900fb4f2b6deadfa0cb41d9139e8d
SHA1

ef049c4c5811f2f6bd12dc43d35fed983059c6e3
SHA256

780b5dd275ee89486e8b469526d461f6bfcbc5fd4b81229c477dbe1926929bac
SHA512

9655174cb04f189073643d1c9c90bf91b2c5c56fd3310249c7bb95ebc2db46f1fc6922d15d587053d0285198b1f18de52d2735acade828e1cc13ce3272574b3b
SSDEEP

768:EoN+YHKahSRY0N86ZYKnRsoxbrHLUnybtRS+KBgWgJ+NKbOOu:EoN+YHXhYYOnn1NIyD4e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba9900fb4f2b6deadfa0cb41d9139e8d

Files

ba9900fb4f2b6deadfa0cb41d9139e8d
.exe windows:4 windows x86 arch:x86

9150b42b01479748d622239befa87e41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
GlobalAlloc
VirtualProtect

user32

GetSystemMetrics

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 222B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ