bac603510880377a16965f1b6afe7d7c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bac603510880377a16965f1b6afe7d7c
Size

39KB
MD5

bac603510880377a16965f1b6afe7d7c
SHA1

a8681014d56273e1599019e6a99e374c840f8992
SHA256

cab92632922526963f592b2e00af2a1dae97c3a5f7a6c1558342750b337dd1ff
SHA512

5984a0c99109725f744d030f50670ea3c24088304da808551c278d6e3dcb0ded89293d32d10dcaaea60c15384298d0c996187c1312c8b8bd37e582f1e61605eb
SSDEEP

768:LiLo+04P0ha5CPMt+jK9q7aI4MpfakoP2V04AKt7eYf5K+c:HRPp0cm7IG2a4AKt7eCy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bac603510880377a16965f1b6afe7d7c

Files

bac603510880377a16965f1b6afe7d7c
.exe windows:4 windows x86 arch:x86

e375fae1e56661edcfb77b789bbf9540

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetCurrentProcess
LoadLibraryExA
VirtualProtectEx
ExitProcess

user32

CharUpperA
CheckMenuItem
EmptyClipboard
DeferWindowPos

Exports

Exports

ReadVbehkxwluyx
BeginTfybjrekkt

Sections

.itext
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.lqt2l1
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lqt1l1
Size: 31KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ