ba9522a450fa1eb6d72afd86e7098c52577eee32481a77162446206736697e51 | Triage

Sharing

General

Target

ba9522a450fa1eb6d72afd86e7098c52577eee32481a77162446206736697e51
Size

58KB
MD5

9246161a933055ded117790e777781af
SHA1

f93dc69b407bfe31bf3e1f63b29cf9d98b422f35
SHA256

ba9522a450fa1eb6d72afd86e7098c52577eee32481a77162446206736697e51
SHA512

67566f30d834deb921a407af6008f5fa695e665cc94df6970d3a3a26392db4dc8babe0e3ef1dab59de6c285036026c94322bd070a5ad978b4d49ddfbf39f19c2
SSDEEP

768:eApQr0GvdFJI34qGxusOy9Rp1pLeAxoeC48PqK1OtaP6qlhqy5Gi0AGw+Zd5jNUB:eAapJlQsh7pWezEPLV65Nax3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba9522a450fa1eb6d72afd86e7098c52577eee32481a77162446206736697e51

Files

ba9522a450fa1eb6d72afd86e7098c52577eee32481a77162446206736697e51
.exe windows:4 windows x86 arch:x86

7ecd8f76627cb5379a7c0b0c02b48c9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
MoveFileW
GetSystemDirectoryW

shell32

ShellExecuteW

msvcrt

_wstat
_exit
exit
wcscmp
wcscat
fclose
memset
fread
fseek
_wfopen
fwrite
wcslen
wcscpy
wcsstr
__p__commode
wcsncpy
__p__fmode
_XcptFilter
__p___winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__set_app_type
_except_handler3
_controlfp
_wcslwr

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 798B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ