015fe9dc9f240717bab59d578f675452 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

015fe9dc9f240717bab59d578f675452
Size

22KB
MD5

015fe9dc9f240717bab59d578f675452
SHA1

7b640e5fe761e1ad2ebe239853fabe783c1e6afc
SHA256

872d587b7d9bca0b2b302b0fa2a3d67f8059b576848716fa43d4ca6fd6bfa46c
SHA512

448d52910198182f1c5fa06d0445d66c48938de8abe24dcaad01bb8291bf5667d60a6b907e225512d55f0069ca214bbdca5ec0d074c17eddb4809f82d34ed205
SSDEEP

384:lqbpWDXW8z0MYXlS4+t4Z0vDkWQvBXjOlabNIO38zv+aEK555vRlKL9CW4N:pX22t62v6VqlONIf+aEK555JlKZcN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
015fe9dc9f240717bab59d578f675452

Files

015fe9dc9f240717bab59d578f675452
.exe windows:4 windows x86 arch:x86

ba0ccec1498c3d09fd8786fd505a903f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
CreateProcessA
Sleep
GetTempFileNameA
SetFileTime
GetTickCount
GetModuleFileNameA
GetLastError
GetSystemDirectoryA
DeleteFileA
MoveFileExA
DeviceIoControl
CloseHandle
CreateFileA
GetWindowsDirectoryA
GetTempPathA

advapi32

ControlService
OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
OpenSCManagerA
DeleteService

msvcrt

strrchr
_strlwr
strlen
fclose
fwrite
fopen
strncpy
fread
strcat
strcpy
sprintf
memset
_stricmp
rand
srand
_snprintf

shlwapi

SHSetValueA
SHDeleteValueA

setupapi

SetupIterateCabinetA

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 992B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ