0ec59a9847fb42d6fbe161a802c8df6b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ec59a9847fb42d6fbe161a802c8df6b
Size

94KB
MD5

0ec59a9847fb42d6fbe161a802c8df6b
SHA1

51d3ae003926808ae2ed8f0199ef442750ccf33f
SHA256

e2213c707cb79329add80606d0669422b92001ea3ae8c6012eb50c8e2ecb238f
SHA512

441a7c1e4561041300ec1370a6e63ec73973adf725d16a837e2645e868f01ece6e8fd24e67055b060241d9002af254d0aa02624327e3259c3900eb446a1edb67
SSDEEP

768:GaSveJwP+E0QMoNjuHuVZPyhhwFB0nyS6PVhtrtg+ahhQIrN1JBA8W6Pbo5wjZh:aKFpwjiwAwFmyS6NhQXr9g6PbhjZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ec59a9847fb42d6fbe161a802c8df6b

Files

0ec59a9847fb42d6fbe161a802c8df6b
.exe windows:5 windows x86 arch:x86

93e7dcf15238946743473f1b211a0087

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetTickCount
IsBadReadPtr
VirtualAlloc
VirtualFree

user32

CheckMenuItem
CreateWindowExA
GetSystemMetrics
GetWindowLongA

Exports

Exports

ServiceMain

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ