0cb68a2b0e359529d73fdfe02010f364 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cb68a2b0e359529d73fdfe02010f364
Size

22KB
MD5

0cb68a2b0e359529d73fdfe02010f364
SHA1

51aa74d92e1f2f09de97b35097cc8f87f78b517a
SHA256

5c852acb9c357c22bd93597a50152dc8b7400de9b9f9941352ae2bd57f2f497e
SHA512

6634d87aeb9a17322d5258563e7bbe7932138b7c2f2628c5b8a796040aa8458046283de84a69ef0a3b2f78344aead4103e172ef7cb0f69a17f3a35178aaadd36
SSDEEP

384:RQp6zFSti8BqaaN4JPRvJCE/t244gbEl0c74u/zbHKa555io19IKLSCW4N:lSti8BqadJPRvJ512FCSbHKa555WKucN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0cb68a2b0e359529d73fdfe02010f364

Files

0cb68a2b0e359529d73fdfe02010f364
.exe windows:4 windows x86 arch:x86

2685ef2c46f750cae713f987a4600f25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
CreateProcessA
Sleep
GetTempFileNameA
SetFileTime
GetTickCount
GetModuleFileNameA
GetLastError
GetSystemDirectoryA
DeleteFileA
MoveFileExA
DeviceIoControl
CloseHandle
CreateFileA
GetTempPathA
GetWindowsDirectoryA

advapi32

DeleteService
OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
OpenSCManagerA
ControlService

msvcrt

strrchr
_strlwr
strlen
fclose
fwrite
fopen
strncpy
fread
strcat
strcpy
sprintf
memset
_stricmp
rand
srand
_snprintf

shlwapi

SHSetValueA
SHDeleteValueA

setupapi

SetupIterateCabinetA

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 992B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ