baac16f44ff0159514684bc02a90a903 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

baac16f44ff0159514684bc02a90a903
Size

83KB
MD5

baac16f44ff0159514684bc02a90a903
SHA1

77435df055e24a242cbf3d91d7b0180f0296bca2
SHA256

8372aac05d769c118e0cf4e7ef2c9fc8daa99220156aa28f2d86b74052137625
SHA512

02af5517270d25235ba5c9a8d82f8a9afdd979f94df2c6c84705399ffed99a060b94e4c71dac795f4eb010110952b5465e31da06c2f626b53af663703cd2634c
SSDEEP

1536:D0000Fk7ib3BCCAW9BHABGmjwZGNF6foqsXM31BrLjEErxTWDTMqhGKYIZTET8bc:L3canHQGmMiYNsXO1hLjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
baac16f44ff0159514684bc02a90a903

Files

baac16f44ff0159514684bc02a90a903
.exe windows:4 windows x86 arch:x86

66e937c69007b2194e61bc82bd1ef11d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualLock
AreFileApisANSI
GetSystemInfo
QueryActCtxW
GetComputerNameA
SetThreadIdealProcessor
WriteConsoleA
LZCloseFile
HeapFree
CheckRemoteDebuggerPresent
FindResourceA
LZInit

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE