ffa03fe9c8451afd02e0f268ddd529c8 | Triage

Sharing

General

Target

ffa03fe9c8451afd02e0f268ddd529c8
Size

468KB
MD5

ffa03fe9c8451afd02e0f268ddd529c8
SHA1

8e172378bc7913ebb0846982e74bdf2d3fdecf8b
SHA256

0df8b8eaca71fa80c3ad6f154cf6a69eeb0b88128fd5ec0797141f22d3567abb
SHA512

512488186d3b50747a2d7b4250ca0262a436bd49e49370868f3095f2d9996e86ce6f6c5076ed79fad4997038d4777278a61693f51084f52191eaabc9b0a41b28
SSDEEP

12288:eqY2ZpcR+k5T0+Usf9ZFT5K+3dm321803k:Iwpc0WToMFT49z03

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffa03fe9c8451afd02e0f268ddd529c8

Files

ffa03fe9c8451afd02e0f268ddd529c8
.exe windows:4 windows x86 arch:x86

8c87ab75845e700958684ecbb69bd743

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegisterServiceCtrlHandlerExW

kernel32

FindResourceExW
GetCurrentProcess
GetCommandLineA

Sections

.text
Size: 462KB - Virtual size: 464KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 258B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE