bae0cf19248bbe364486460f25c79e5b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bae0cf19248bbe364486460f25c79e5b
Size

276KB
MD5

bae0cf19248bbe364486460f25c79e5b
SHA1

c1b98a36f30a174ba22f2b03bd763869759b73ff
SHA256

116097875373ba30ace820608a62560621e6692c28998d35f6eed322e29d9595
SHA512

09786ad6bdca90d66a11d4a8972f143643974cb240ba2279c92f6e34d4b452d5f4295b37526ba568804131f767ccc71af6192a023ec32f979b2b23ccb77e715b
SSDEEP

3072:pzQQZlWH/EsOmQOa74lSJ7QGcLuq9yTxOrSgGNAfIDDWC0sRptg1w9UIWEf9QefS:5RZlWH/s74MJsbsUVnfIDCZIPUITSefS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bae0cf19248bbe364486460f25c79e5b

Files

bae0cf19248bbe364486460f25c79e5b
.exe windows:4 windows x86 arch:x86

9ca3942ebc486c890b69ae1e67f0bf23

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
ExitProcess
LCMapStringA
CloseHandle
CreateFileA

user32

CreateWindowExA
CharLowerBuffA
wsprintfA
SetWindowLongA
CloseWindow

advapi32

RegCreateKeyA
RegDeleteKeyA
RegOpenKeyA
RegSetValueA
RegEnumKeyA
RegEnumValueA
RegQueryValueA
RegCloseKey
RegDeleteValueA

Sections

.text
Size: 164KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size:

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ