ba5c09b6539db5af2df88c1fac14507008816259cb3ed35fcc031968efd20322 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba5c09b6539db5af2df88c1fac14507008816259cb3ed35fcc031968efd20322
Size

30KB
MD5

5377d802cd9c567775545efdbb7ff246
SHA1

396ea5b320ec0582231f24af5903abe08c0df359
SHA256

ba5c09b6539db5af2df88c1fac14507008816259cb3ed35fcc031968efd20322
SHA512

fb4b7f2bde79ad8c240952e71f8e0ad706b2b961a6b2aafde5486366278f97ec1a3135ee42b0839044718c334ce0d1212ea50d020975750ff865d546c754e3c1
SSDEEP

384:bXvr/G9K/aASCjr8bfCmIyCl/wI0/1YTrfjkC+rrN9TjYAnAPgxKaH:b/zG9lCapIyMdnfjMnlx3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba5c09b6539db5af2df88c1fac14507008816259cb3ed35fcc031968efd20322

Files

ba5c09b6539db5af2df88c1fac14507008816259cb3ed35fcc031968efd20322
.exe windows:4 windows x86 arch:x86

504411fa583b3c54342e6878c01d9e81

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

BeginPaint
DispatchMessageA
DrawTextA
EndPaint
TranslateMessage
PostQuitMessage
ShowWindow
UpdateWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadIconA
GetWindowRect
LoadCursorA
GetMessageA
SetWindowPos

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ