0c05eef43de8b1032e48027bffcb085d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c05eef43de8b1032e48027bffcb085d
Size

5KB
MD5

0c05eef43de8b1032e48027bffcb085d
SHA1

539e4c3c4f57cb445c790b96c2e56638c0209b70
SHA256

7ac10931d4b175d380cf401045203dd87ad4d38b3c03f9826888022f2902e52b
SHA512

21e54fc002b83bbed3b12f37a89bf859535ea3d2bdb06d5c9c86b34d0412af0a9ffc04941418c7c50f923347582844a86818568b2e3cab1267a761cecc46a049
SSDEEP

96:LTl/hX9ycyzL2IGK+fdfysUW1kUgjnH2:LTFhXscrIGnZy8k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c05eef43de8b1032e48027bffcb085d

Files

0c05eef43de8b1032e48027bffcb085d
.exe windows:4 windows x86 arch:x86

928797a3b4a978217e2228461ff68a8d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetFullPathNameA
ExitProcess
DeleteFileA
CreateFileA
WriteFile

user32

MessageBoxA

advapi32

DeleteService
CreateServiceA
CloseServiceHandle
StartServiceA
OpenSCManagerA

Sections

.text
Size: 512B - Virtual size: 410B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE