4b443f5a1b22aca03dbf7ec94ed560a2 | Triage

Sharing

General

Target

4b443f5a1b22aca03dbf7ec94ed560a2
Size

7KB
MD5

4b443f5a1b22aca03dbf7ec94ed560a2
SHA1

c37e3a97693b8c732d191c233dccebfd06e8592a
SHA256

4383fdee71e73ca8b6296078d72f2ec199f17bd82a3f8a1b53dc65412a9b7bfd
SHA512

ce40e3d9dc1fb207bbbfe0a762255528c58693efcca56a7255152c2e03787f17f55713d83f1e4ce241615b9cdb53faa6b32f3a7a0b51eb21bb40d613137cecc7
SSDEEP

96:+MWQONvrBEvYY/NefexLYfAg3bbsQprP4oynhihHw9hkP17E:+JQeBEvYgNweKft3bbsQprP4oynU6qE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b443f5a1b22aca03dbf7ec94ed560a2

Files

4b443f5a1b22aca03dbf7ec94ed560a2
.exe windows:4 windows x86 arch:x86

ed14c0a8a69b280f744be0fa8d2d0215

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
CloseHandle
FreeResource
WriteFile
LockResource
GetModuleHandleA
SizeofResource
FindResourceA
Sleep
GetSystemDirectoryA
GetProcAddress
GlobalAlloc
LoadLibraryExA
GetLastError
GlobalFree
FreeLibrary
DeviceIoControl
LoadResource

advapi32

CreateServiceA
ControlService
DeleteService
OpenSCManagerA
OpenServiceA
StartServiceA
CloseServiceHandle

msvcrt

printf
sprintf
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ