ba7d6e9ac213ff77322addaa1ef24692d2cb786b76c56842fcbf2c261dabced8 | Triage

Sharing

General

Target

ba7d6e9ac213ff77322addaa1ef24692d2cb786b76c56842fcbf2c261dabced8
Size

5KB
MD5

441e34332a140984169103f72dd2a40c
SHA1

56179f32e2ca6c3c6692561175adbc2d57038cb2
SHA256

ba7d6e9ac213ff77322addaa1ef24692d2cb786b76c56842fcbf2c261dabced8
SHA512

5443bdf2496c5eb4ec72f8ab2f5f5c24c9092d916098c0332ba4021ba9efb515b36cf983f146061f276d91dfff3840b28c1e3caa7d9988e2c1a7160381a175f9
SSDEEP

96:53GzALzfOZVepiWxdrgMrF+21gTN69Byn6J6x:5WAL7AVFQdrlVwkyn6J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba7d6e9ac213ff77322addaa1ef24692d2cb786b76c56842fcbf2c261dabced8

Files

ba7d6e9ac213ff77322addaa1ef24692d2cb786b76c56842fcbf2c261dabced8
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\code\KR\壳\Code\Release\Code.pdb

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ