baceb1442bb0221c8c751fdd753a9920N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

baceb1442bb0221c8c751fdd753a9920N.exe
Size

63KB
MD5

baceb1442bb0221c8c751fdd753a9920
SHA1

d8afbcf3ea270a504e9935b48f30d19c31c46676
SHA256

d42c927cb90c8e90393b933b4c0025977d475f332dae7c508102b227e56a9e7b
SHA512

791740058613863dcb0c929c427998e04e53442e743ad0440186d960dc58c40b1455b9425dd46f6f5fef1404b86a1bd735137e7468417e5cd2bedec8eda7c70a
SSDEEP

1536:mqGcZtWFp7X6HLgNDQfFiSKydKLTrd+841uTtTHwKG:mqGcZAGcNuYqsT48PtTHwKG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
baceb1442bb0221c8c751fdd753a9920N.exe

Files

baceb1442bb0221c8c751fdd753a9920N.exe
.exe windows:4 windows x86 arch:x86

474adeaefadadc0554fef7a4c174e5a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetBinaryType
PssWalkMarkerTell
GetCurrentProcess
LeaveCriticalSection
AcquireSRWLockExclusive
VerifyConsoleIoHandle
GetModuleHandleA
AddIntegrityLabelToBoundaryDescriptor
lstrcat
MoveFileW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE