0a01436ba0138ec0bbe6f7a58a60aaee

General

Target

0a01436ba0138ec0bbe6f7a58a60aaee
Size

121KB
MD5

0a01436ba0138ec0bbe6f7a58a60aaee
SHA1

9fc6616f62ab88eec3814ba3c3f477834cb43bbc
SHA256

c7ce5eb5f02488611fa7b878dc71eb907a5de6d3d8b5a021de1ce65df26bde5a
SHA512

795c8a73157174bed561dc683710cb92371ea29c05ed86fb6d1dba3a75e9df2bdcfed20c3c6c6aecbfc87c82e6fd4b0dadb7e2a24e41b86cd0c077e2c233e068
SSDEEP

1536:OQ0D9HggfnD+CYGATtKINejX27qNVVWHBZoyJoU:OQ0Hn6CYGMtbkX+mIhZoyJo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a01436ba0138ec0bbe6f7a58a60aaee

Files

0a01436ba0138ec0bbe6f7a58a60aaee
.exe windows:1 windows x86 arch:x86

99a39a79c5671f1f3415c838bb0b5384

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

kernel32

ExitProcess
FindResourceA
GetEnvironmentVariableA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetShortPathNameA
GetSystemDirectoryA
GetThreadContext
CopyFileA
LoadResource
LocalAlloc
LocalFree
LockResource
ReadProcessMemory
ResumeThread
RtlUnwind
SetThreadContext
SizeofResource
TerminateProcess
VirtualAllocEx
VirtualQueryEx
CreateProcessA
WriteProcessMemory
lstrcatA
lstrcmpiA
lstrcpyA
DeleteFileA

advapi32

ChangeServiceConfig2A
CloseServiceHandle
CreateServiceA
LockServiceDatabase
OpenSCManagerA
OpenServiceA
QueryServiceLockStatusA
StartServiceA
UnlockServiceDatabase

crtdll

__GetMainArgs
exit
fread
fseek
ftell
malloc
printf
raise
signal
sprintf

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 36B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

99a39a79c5671f1f3415c838bb0b5384

Headers

File Characteristics

Imports

shell32

kernel32

advapi32

crtdll

Sections

.text Size: 4KB - Virtual size: 4KB

.bss Size: - Virtual size: 36B

.data Size: 1KB - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 112KB - Virtual size: 112KB

.text
Size: 4KB - Virtual size: 4KB

.bss
Size: - Virtual size: 36B

.data
Size: 1KB - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 112KB - Virtual size: 112KB