15bd6493cf0b7aae635a0c7c57d9e31e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15bd6493cf0b7aae635a0c7c57d9e31e
Size

140KB
MD5

15bd6493cf0b7aae635a0c7c57d9e31e
SHA1

b1ab091fdbf87a8278f00166aa3c82f854482be9
SHA256

14cd712e40fc243cff3d62dc289843dd5b0c867fe27c2b8da42ea3d75f9352ec
SHA512

df3d10838460613bfd2aa45d412d257935d24cc0105660c3f5ec264f2053ef29938728569ba78ab000b4b9e4f8d1caa1969a2d016e6bcfbeaac52eaa1eee099f
SSDEEP

3072:mmsKKwwBk29dh7IRtvi6EHEKKgSDgTI2uhs7uRf:z3Kni29dORE6EWgJ6nRf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15bd6493cf0b7aae635a0c7c57d9e31e

Files

15bd6493cf0b7aae635a0c7c57d9e31e
.exe windows:4 windows x86 arch:x86

69d3d0a2b864eff2c9a05213a571a3c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
OpenEventA
CreateFileA
ExitProcess
GetFileAttributesA
HeapAlloc
GetProcessHeap
HeapReAlloc
CloseHandle
lstrlenA
GetSystemTimeAsFileTime
RtlUnwind
InterlockedExchange
VirtualQuery
GetSystemDirectoryA
SetCurrentDirectoryA
WritePrivateProfileStringA
GetFullPathNameA
HeapFree

user32

wvsprintfA

advapi32

CloseServiceHandle
StartServiceA
CreateServiceA
OpenSCManagerA

shell32

DragAcceptFiles

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE