5a1ae09bf5f5b2f59cbad91bc841ba98 | Triage

Sharing

General

Target

5a1ae09bf5f5b2f59cbad91bc841ba98
Size

7KB
MD5

5a1ae09bf5f5b2f59cbad91bc841ba98
SHA1

a142b080da23c38a7e20fc3256e4852202a39dfe
SHA256

75e8538d11f2da89e2e7b8e9975485f380a0fa8cdebf1db4ddd4368a9a2dc05c
SHA512

b47963afb2aadfd16b61c7679ecbcc79d1261be42cc67cdc627413aced2c2562ddd1efa8e3da65941c9ebc028cbd2fadcad81c029eae4e2c004ee2ec99b41031
SSDEEP

192:Xi3zrSQBW7Y8/G2oxjyeS1RzZwV1r1Qz5iQP1oyRLBW+xY:S3zgNleE0V1riV1/LBW+xY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a1ae09bf5f5b2f59cbad91bc841ba98

Files

5a1ae09bf5f5b2f59cbad91bc841ba98
.exe windows:4 windows x86 arch:x86

537e39c00d04a868204f72bfc97b5c2d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
CloseServiceHandle
StartServiceA
OpenServiceA
OpenSCManagerA
CreateServiceA
RegQueryValueExA

user32

wsprintfA

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strstr
strchr
??2@YAPAXI@Z
??3@YAXPAX@Z
_except_handler3
malloc
realloc

kernel32

GetStartupInfoA
SetLastError
GetTempPathA
GetTickCount
FindResourceA
LoadResource
FindFirstFileA
LocalFileTimeToFileTime
SetFileTime
SizeofResource
WriteFile
FreeResource
MoveFileA
DeleteFileA
GetCommandLineA
CreateMutexA
GetLastError
ReleaseMutex
Sleep
GetWindowsDirectoryA
lstrcatA
GetModuleHandleA
GetFileAttributesA
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
GetProcAddress
LoadLibraryA
ExitProcess
lstrlenA
lstrcpyA
CreateDirectoryA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ