baa6229fa9de303bab1752763895412f | Triage

Sharing

General

Target

baa6229fa9de303bab1752763895412f
Size

195KB
MD5

baa6229fa9de303bab1752763895412f
SHA1

b0bd0cf67a887129366439b0711bb7c814038170
SHA256

f4c6a40c1437710f4d11f8c7417f23911f6c811a1c0a165dece20afb6d561f22
SHA512

0612890c9459e7c8220881a8e89523434ff4b7769261dd8217adf55f314ff8de3b487d29839c1a80a8d911f45eb5211a2b4620fa4b4123972d4edd8f18fc998c
SSDEEP

3072:ZeLEn3xYjdbvHp3bWKq9zeQ45Bar/nkVnNuTQo8iBl+mLuNJzODJ9fxkKlrPfI:mEnOjdbvJ3b+EQ45Ur/k7uTQo8SI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
baa6229fa9de303bab1752763895412f

Files

baa6229fa9de303bab1752763895412f
.exe windows:4 windows x86 arch:x86

c6081e4d60766c8df68c022f33ec46e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
DispatchMessageA
ShowWindow
RegisterClassExA
PostQuitMessage
MessageBoxA
LoadIconA
LoadCursorA
GetMessageA
GetDesktopWindow
DefWindowProcA
CreateWindowExA

kernel32

CloseHandle
SetEvent
MulDiv
GetProcAddress
GetModuleHandleA
GetCommandLineA
GetCPInfo
FlushFileBuffers
ExitProcess

comctl32

InitCommonControls
InitCommonControlsEx

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 714B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ