096665965a7f0a0fd572d7c961736510 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

096665965a7f0a0fd572d7c961736510
Size

20KB
MD5

096665965a7f0a0fd572d7c961736510
SHA1

d7b0f85e201f3d3bf50b1b3899c5dfc93ee4cb7f
SHA256

90c92c8635e787f4859941c440706de87de464ffea707ad6784cd17a8d39eaf3
SHA512

e6f9912201faded331de7361c41f803441887cbabee5816c33fa9066a1055f6f5f943c683370ef4060ff4172557ca97c393c1c09b5f2a18939582010dc3867fe
SSDEEP

384:idLdN8vgNsTHroke3IPEJINOsU28He3eamHneHb5q6oz3/eZSH555WzZN8xCW4N:idLP84NnkQJINOsU28b7eY9/4SH555W7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
096665965a7f0a0fd572d7c961736510

Files

096665965a7f0a0fd572d7c961736510
.exe windows:4 windows x86 arch:x86

61b11eaa20d3cb6872100408c25df775

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempFileNameA
GetTempPathA
DeleteFileA
GetLastError
Sleep
CreateProcessA
GetSystemDirectoryA
GetFileAttributesExA
CreateFileA
SetFileTime
GetTickCount
CloseHandle

advapi32

DeleteService
OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
OpenSCManagerA

msvcrt

strrchr
_strlwr
strlen
fclose
fwrite
fopen
sprintf
memset
strcat
strcpy
_stricmp
rand
srand
_snprintf

shlwapi

SHSetValueA

setupapi

SetupIterateCabinetA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 992B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ