5175c34fe18be90de8d85ac1c222bc91 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5175c34fe18be90de8d85ac1c222bc91
Size

200KB
MD5

5175c34fe18be90de8d85ac1c222bc91
SHA1

60497859e414d6bed38fe132b8cabfa0d468610f
SHA256

e12b6ccbc76695fef2a34d85a66af9b004331393e4dc115b531d7ea6133ed4f6
SHA512

5b7b496be4f3ee2c24245c5c640b310c909309fe7e557d41f8c7fef698c61b7b9d5e44bcfa86b78f5df69fd70e896e9b6892adb833c25efe365dd2711225b3f7
SSDEEP

6144:I1d0KBjipswfAVBNqKGcwTMRNvAvgMYd5n:Id0qiSfRGJTMzvAYMK5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5175c34fe18be90de8d85ac1c222bc91

Files

5175c34fe18be90de8d85ac1c222bc91
.exe windows:4 windows x86 arch:x86

34973e3ac8b0e552f7d02361bd7b1a31

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
sprintf
memset
strlen
strrchr
strcpy
strncpy
_lseek
_close
_write
_read
_open
free
malloc

advapi32

CloseServiceHandle
ChangeServiceConfigA
StartServiceA
OpenServiceA
OpenSCManagerA
CreateServiceA

kernel32

ExitProcess
DeleteFileA
CreateFileA
FindResourceA
SizeofResource
LoadResource
CreateProcessA
CloseHandle
GetTempPathA
lstrcatA
LoadLibraryA
GetProcAddress
FreeLibrary
GetStartupInfoA
GetModuleFileNameA
GetSystemDirectoryA
WaitForSingleObject
GetTempFileNameA
WriteFile
GetModuleHandleA

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ