ba1e08d8dd5b22a3478dad46b31c0b9e9fefda4525bd3962ec44133fbfe58615 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba1e08d8dd5b22a3478dad46b31c0b9e9fefda4525bd3962ec44133fbfe58615
Size

8.1MB
MD5

e990f241b00645ed22219ba50a6f35bd
SHA1

9ba252583ea0ed4554b650549e19e54a7ae0855f
SHA256

ba1e08d8dd5b22a3478dad46b31c0b9e9fefda4525bd3962ec44133fbfe58615
SHA512

8274b7d7cbf16f1659b90a2bfbbe6eb301a55b06dfef1a0566fb3be48dd1a373917ce24ed93e633eedd5539841a55327f5156f35aaf18ec3d577310cc959798a
SSDEEP

196608:lsVR+iBQFG2a0LMRffVFx2e+R6f5sBoum+KG9:lb/+0e+ROvU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba1e08d8dd5b22a3478dad46b31c0b9e9fefda4525bd3962ec44133fbfe58615

Files

ba1e08d8dd5b22a3478dad46b31c0b9e9fefda4525bd3962ec44133fbfe58615
.exe windows:4 windows x86 arch:x86

16fd02c8f6e1ebda2e0dcb1dd01073de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess

user32

GetKeyboardType
CreateWindowExA

advapi32

RegQueryValueExA
RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo

version

VerQueryValueA

gdi32

UnrealizeObject

msimg32

AlphaBlend

ole32

OleUninitialize

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

Sections

pec1
Size: 624KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7.5MB - Virtual size: 10.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ