5527ebe7c1c57ea824bc98352bcc266b | Triage

Sharing

General

Target

5527ebe7c1c57ea824bc98352bcc266b
Size

28KB
MD5

5527ebe7c1c57ea824bc98352bcc266b
SHA1

e19f2b49f2e3059ebe5bf4a2368a92d48420f4c7
SHA256

50f12c418462ee8d2867322a24accff206a88c31c85620f5e3b710f64a47e01e
SHA512

b31256567dfc2422ceae410be0e55ce17be508dcdcd085b721887414a789cf997a7771a9bce67b4697463aa51dc16e4c020571f8ad8676ce9621fca78a6b9905
SSDEEP

768:eVZUrTlDb1wIER2+h8zYIA4YX/SH5553wqicN:ewrTQIsr8zYIXgCGcN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5527ebe7c1c57ea824bc98352bcc266b

Files

5527ebe7c1c57ea824bc98352bcc266b
.exe windows:4 windows x86 arch:x86

61b11eaa20d3cb6872100408c25df775

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempFileNameA
GetTempPathA
DeleteFileA
GetLastError
Sleep
CreateProcessA
GetSystemDirectoryA
GetFileAttributesExA
CreateFileA
SetFileTime
GetTickCount
CloseHandle

advapi32

DeleteService
OpenServiceA
StartServiceA
CreateServiceA
CloseServiceHandle
OpenSCManagerA

msvcrt

strrchr
_strlwr
strlen
fclose
fwrite
fopen
sprintf
memset
strcat
strcpy
_stricmp
rand
srand
_snprintf

shlwapi

SHSetValueA

setupapi

SetupIterateCabinetA

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 992B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ