ba9ab0041a4a84cdb65e995d896c7c80

General

Target

ba9ab0041a4a84cdb65e995d896c7c80
Size

192KB
MD5

ba9ab0041a4a84cdb65e995d896c7c80
SHA1

8d89aadfbab1447c40e4d8fccfcc1349fc325a56
SHA256

ae59ea899b518f335e4bfd5e967c6d7e5ab7b3ad8382daba14972ab5693c2133
SHA512

196576f51bcafa4197834388dd2f08b26caf2755674152e83fb1440780f95d0f5177019d66fd916babc35ea53dfbda296bbd91e8940b66d3ee3b608bbf769a8f
SSDEEP

3072:Yyxq+tiwJWNGmyJxPsHRd4zWlsxRbV9gCNi9V3ql:++gHNGmyJ5sxGfaR4l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba9ab0041a4a84cdb65e995d896c7c80

Files

ba9ab0041a4a84cdb65e995d896c7c80
.exe windows:4 windows x86 arch:x86

e8a27976205de40da07be67db54e565c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderPathA

ole32

CoCreateInstance
CoInitialize
CoCreateGuid

user32

wsprintfA

rpcrt4

UuidToStringA

shlwapi

SHGetValueA
SHEnumKeyExA
SHSetValueA
StrStrIA
SHEnumValueA

advapi32

CryptReleaseContext
RegOpenKeyExA
OpenSCManagerA
DeleteService
OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
CryptAcquireContextA
CryptGenRandom
RegSetValueExA
RegCreateKeyExA
RegCloseKey

msvcrt

memcpy
rand
islower
memcmp
??2@YAPAXI@Z
isgraph
memset
atoi
strncpy
wcscpy
tolower
mbstowcs
sprintf
srand
time
strerror
ispunct
isxdigit
fclose
fwrite
fopen
free
isalnum
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__mb_cur_max
wctomb
strcpy
strcat
malloc
isspace
strlen
printf
isalpha
isupper

imagehlp

ImageNtHeader

kernel32

GetFileAttributesExA
GetSystemDirectoryA
ExitProcess
GetVersionExA
GetLocalTime
SleepEx
lstrlenA
GetLastError
GetModuleHandleA
SetFileTime
FindFirstFileA
GetFileAttributesA
GetPrivateProfileStringA
FindNextFileA
CloseHandle
WideCharToMultiByte
GetStartupInfoA
CreateFileA

Sections

.text
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e8a27976205de40da07be67db54e565c

Headers

File Characteristics

Imports

shell32

ole32

user32

rpcrt4

shlwapi

advapi32

msvcrt

imagehlp

kernel32

Sections

.text Size: 56KB - Virtual size: 52KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 112KB - Virtual size: 108KB

.text
Size: 56KB - Virtual size: 52KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 112KB - Virtual size: 108KB