baa5b2628bd63de4a2cfffb64eefb047 | Triage

Sharing

General

Target

baa5b2628bd63de4a2cfffb64eefb047
Size

536KB
MD5

baa5b2628bd63de4a2cfffb64eefb047
SHA1

65eda488dc94511f012161d0bd4d26a7c9d18c56
SHA256

bd2989ffbe31e4ccddc9d8572f28feb12b43fd67b80c5ea9d169b7ed3ea89d01
SHA512

22ccdaf082d5b0e7cc383af11307312a3b8176bfd777bde261f667b445b6acd891030ffcc996a3820c617b14f6814c47f6808626c2783f6fd9e1c827479101d0
SSDEEP

12288:u/RcRY7afxBaSph/0TNeY4z9b5sNs1zTv:uZcR6af3aSph/sNe/b5sNstT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
baa5b2628bd63de4a2cfffb64eefb047

Files

baa5b2628bd63de4a2cfffb64eefb047
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 368KB - Virtual size: 366KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stub
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE