680379cca541792be2a3992158981a92 | Triage

Sharing

General

Target

680379cca541792be2a3992158981a92
Size

80KB
MD5

680379cca541792be2a3992158981a92
SHA1

84b4ddea3339234b42c1174866fd2bc355a91eda
SHA256

6e6bb9fb786647da34cee335073bc2fd8a41fb9d6ad32b5ad8d2c947c2fc47d3
SHA512

f43e317d7fb7ca422492de564c24310a8931e05945b1e6dba18bee77c8f0f68496e4d8ef276ff800ba09f64ba4bb3d07affe5af7ca99dcbb793bc063148b48c3
SSDEEP

1536:Edt5oKYz4YqZpg9bBAFUECfZHnCFtoPlO:qLoKYsH/g9bmUXnCFa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
680379cca541792be2a3992158981a92

Files

680379cca541792be2a3992158981a92
.exe windows:4 windows x86 arch:x86

a1126da7442d0fb72bb8a54eb94e006f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
CreateFileA
WriteFile
CloseHandle
GetSystemTime
Sleep
GetModuleHandleA
GetProcAddress
Process32First
Process32Next
ExpandEnvironmentStringsA
GetLastError
RtlUnwind
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

advapi32

OpenSCManagerA
LockServiceDatabase
OpenServiceA
CreateServiceA
UnlockServiceDatabase
CloseServiceHandle
StartServiceA

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE