1dfaaba64a1c84e851e2c1abd8e10ddd

General

Target

1dfaaba64a1c84e851e2c1abd8e10ddd
Size

44KB
MD5

1dfaaba64a1c84e851e2c1abd8e10ddd
SHA1

884651a49518a713dbeffd252f81f77cb7e6adef
SHA256

7c6a1a79fb5d1372f7d54c9592403d5f0166ac2b2f53f71c170c990a3b1f79c3
SHA512

ad019505d947f9ba74a410fac379c2a06b219620e09f925e0e9c1f063e2ece3ceeabf1493d1604441fd077f857a0a8644f724cfbae9ab4f78b024cd484b4b7b2
SSDEEP

768:VftOfGhYf5w1iPpwJbZrMWFPOXtRRI3ceStV:VVOOhYxwsPSZNpdOXzy3OtV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1dfaaba64a1c84e851e2c1abd8e10ddd

Files

1dfaaba64a1c84e851e2c1abd8e10ddd
.exe windows:4 windows x86 arch:x86

719e19868f53778e5b08fa27608c1288

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

StartServiceCtrlDispatcherA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
DeleteService
ControlService
OpenServiceA
SetServiceStatus
RegisterServiceCtrlHandlerA

kernel32

GetCommandLineA
OpenMutexA
CloseHandle
GetLastError
GetModuleFileNameA
CopyFileA
CreateProcessA
Sleep
GetEnvironmentVariableA
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetVersionExA
HeapFree
SetUnhandledExceptionFilter
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

719e19868f53778e5b08fa27608c1288

Headers

File Characteristics

Imports

advapi32

kernel32

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 2KB

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 2KB