139b3ee0bc76771775f303bee639e22a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

139b3ee0bc76771775f303bee639e22a
Size

29KB
MD5

139b3ee0bc76771775f303bee639e22a
SHA1

f7f9982a82d632bef75127f94b3c22e9e52c659e
SHA256

92b24ba9bab9de069f452be430bddbea07f6b976b9b31302f98571c6851ada52
SHA512

88f15096ce2e840b868752527e908377771e90edd86f091ae01723e7d9d0598c627441fa16bc24095ffc1ff4f3c95d05dd1a9d3bf9813c14593755cd412373fe
SSDEEP

768:4BQAskS1gtQ2ddsBWiM+gTbgWjvVF8Gl8:4aAskWgOA+WiM+gbgWBF8GS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
139b3ee0bc76771775f303bee639e22a

Files

139b3ee0bc76771775f303bee639e22a
.exe windows:6 windows x86 arch:x86

4a34c94f8b4199e8b3b6025e378e8fa7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CloseServiceHandle
StartServiceA
CreateServiceA
OpenServiceA
OpenSCManagerA
RegCloseKey
RegSetValueA
RegCreateKeyA
RegSetValueExA

kernel32

HeapAlloc
GetProcessHeap
HeapFree
FreeResource
LockResource
SizeofResource
LoadResource
FindResourceA
CloseHandle
WriteFile
CreateFileA
ExitProcess
CreateProcessA
GetEnvironmentVariableA
lstrcatA
GetShortPathNameA
lstrlenA
lstrcpyA
GetCommandLineA
QueryPerformanceCounter
GetLastError
Sleep
DeviceIoControl
MoveFileExA
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ