bac5d60d505de1953703aaba6b95e1e7036ab5e88ba75ff65a3c88ae86b2a0f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bac5d60d505de1953703aaba6b95e1e7036ab5e88ba75ff65a3c88ae86b2a0f3
Size

320KB
MD5

a682cd2ed9db86dbcd984689804ad302
SHA1

3847600acb8121677dd0c70b69c79127fdfabddf
SHA256

bac5d60d505de1953703aaba6b95e1e7036ab5e88ba75ff65a3c88ae86b2a0f3
SHA512

d9d3405f0dcf9caf00ad899bfd82b726fbf2edb2d1df4af29a759fa52f1d81471537f3ad6ff70e3a582bba13ea84963f6f5169a7ca38d894dfe3fced03098eb5
SSDEEP

6144:AaVyyHzAVA8H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:jzFK2EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bac5d60d505de1953703aaba6b95e1e7036ab5e88ba75ff65a3c88ae86b2a0f3

Files

bac5d60d505de1953703aaba6b95e1e7036ab5e88ba75ff65a3c88ae86b2a0f3
.exe windows:4 windows x86 arch:x86

0e89aa3a772a70c26aab44a1874c1091

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemWow64DirectoryW
InterlockedIncrement
BaseCleanupAppcompatCacheSupport
HeapFree
PostQueuedCompletionStatus
FindNextFileW
WriteTapemark
TlsSetValue
CreateDirectoryExW
UTRegister
SetConsoleOS2OemFormat

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE