62938cb6faaeac8df509f73e5cb55f43 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62938cb6faaeac8df509f73e5cb55f43
Size

25KB
MD5

62938cb6faaeac8df509f73e5cb55f43
SHA1

1fb46e5bb0ee47ba78704f6185c32831307f89ff
SHA256

cb61d305de8db2e9cd8a7f718fcd5f8f18c4ef9d9cd2faf864f0b8ff8113e800
SHA512

d4356c03d0f0fbaf447b2678137898bc02ff146df56d93bdcd09fe1e6d17ed84c24ab7550eb0e6fb38d7ac0c3fe352ff40596f739830d8b140468675fb487705
SSDEEP

768:ljrilAgJW8LETFdAY0frT4Hw91GjZdKm6:lc1JS5kT4HwDQdKm6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62938cb6faaeac8df509f73e5cb55f43

Files

62938cb6faaeac8df509f73e5cb55f43
.exe windows:4 windows x86 arch:x86

336d798776fdd9fa820c6a3fe5057ed4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
CloseHandle
WriteFile
lstrlenA
CreateFileA
lstrcatA
CreateToolhelp32Snapshot
GetTempPathA
GetModuleFileNameA
ReadFile
SetFilePointer
GlobalAlloc
GetFileSize
Sleep
GetCurrentThreadId
Process32First
GetCurrentProcessId
GetTickCount
Process32Next

user32

PeekMessageA
wsprintfA
PostThreadMessageA

advapi32

OpenServiceA
OpenSCManagerA
ControlService

Sections

.text
Size: 928B - Virtual size: 920B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 976B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ