657765a9d48d0ec95195885d70baaf81 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

657765a9d48d0ec95195885d70baaf81
Size

3KB
MD5

657765a9d48d0ec95195885d70baaf81
SHA1

eab80664e43e6db74129dfdc8d4c774eaefb00f1
SHA256

e965e2cb2d580cea52c5ced8474124ae3a7c3eeeb0737b9e865c9e2511553952
SHA512

3f4f2e44a0398683c1bb5d4470d86b81f8b3baf2c17bf4ffc4e5d07238b9b1d93e32e5f6965b23a31b25ac710cde9f1b18672bb48e35dd0a0d16b059deaa0ad8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
657765a9d48d0ec95195885d70baaf81

Files

657765a9d48d0ec95195885d70baaf81
.exe windows:1 windows x86 arch:x86

83dd04b1bf81b1eb3907ad1210206a95

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleFileNameW
lstrcmp
CopyFileW
ExpandEnvironmentStringsW
SetFileAttributesW
Sleep
OpenMutexW
CreateMutexW
MoveFileExW

user32

MessageBoxW

shell32

ShellExecuteW

advapi32

RegSetValueExW
RegCloseKey
RegCreateKeyExW
OpenSCManagerW
CreateServiceW
DeleteService
StartServiceW
ControlService
CloseServiceHandle

Sections

:)
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE