ba25a109265b5f70e5d74d80064beba7786dc0ac53995f496cf991698b941708 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba25a109265b5f70e5d74d80064beba7786dc0ac53995f496cf991698b941708
Size

1.1MB
MD5

ffea1d566aa093d1681bfee9f292873e
SHA1

f83b8ce7713e9f51e3dd6e17225b65f80cff072c
SHA256

ba25a109265b5f70e5d74d80064beba7786dc0ac53995f496cf991698b941708
SHA512

38b41aa03e627555a6e8e4225ec63eda12d70da5e96260a6921c8d71203c08f3f306c43e9ffa1e4dd1fd0e1664a5e52fccb628a6f0e86ac76308e1efa946e0ac
SSDEEP

24576:4MWMB3nr/0z3LN1jkOQf5cxZtKgvnJanLUyjPHwhXCO0sweEO7fH:FW43rOB1jkjTgJEvDQFfwMP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba25a109265b5f70e5d74d80064beba7786dc0ac53995f496cf991698b941708

Files

ba25a109265b5f70e5d74d80064beba7786dc0ac53995f496cf991698b941708
.exe windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Exports

Exports

LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
dllMain_Name
main
main1
main5
mainB
mainB_
mainW
main_

Sections

.text
Size: 987KB - Virtual size: 987KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

flag_dat
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 644KB - Virtual size: 644KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ