baf4b94cc7cc98fd184ae2fd27be3ddb | Triage

Sharing

General

Target

baf4b94cc7cc98fd184ae2fd27be3ddb
Size

13KB
MD5

baf4b94cc7cc98fd184ae2fd27be3ddb
SHA1

c566aee044da86ff1f012b2663001daec1165c74
SHA256

dd59ee72db9fd9ddbf027416a4a344ade404723570c072fd65237deaf2d7fe9a
SHA512

52a9371407de1cae38c0087ad970bc0fb68b881604fcc596c0b6f58206b1bab3ab62e507f4903bf5ab0526275a7d3e54af4c7139efb8e5cc51e84e774ee99366
SSDEEP

192:AqhOA33Rk9I8kHYq5B1bF/Y9Lz733Rk9I8kHYq5B1bF/Y:AqhOAdzHYmXbNY9LndzHYmXbNY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
baf4b94cc7cc98fd184ae2fd27be3ddb

Files

baf4b94cc7cc98fd184ae2fd27be3ddb
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ