bac9876e9de3502056fdb1d59bd4d713 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bac9876e9de3502056fdb1d59bd4d713
Size

275KB
MD5

bac9876e9de3502056fdb1d59bd4d713
SHA1

953012abc05a5e06efe0bc0241d0f05180aeedcb
SHA256

21e2af4a37c742e69ecce8df14e8175bfacdde8f99ec15b5b7aed60fa8a24025
SHA512

c5a17d32c775b793accc4d2f1887c43c20d4f0645394d31598f81e5f28aa219976ed7a906387028ae4b6d7f91eed8b2fde94fd309ff4554964db602f5e4ea2a2
SSDEEP

6144:G23lbdGbw0Luu9GecKmPYl5QXAm+CERydlZIr9M0Sgg5j/t:rlbdqwM9GecKCvAbYZYSP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bac9876e9de3502056fdb1d59bd4d713

Files

bac9876e9de3502056fdb1d59bd4d713
.exe windows:4 windows x86 arch:x86

923e8aa3985dc6d20c2ba33d0e772d50

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

comdlg32

GetOpenFileNameA

Sections

CODE
Size: 263KB - Virtual size: 784KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE