71124265427250cb2870c24f8c0f8d38 | Triage

Sharing

General

Target

71124265427250cb2870c24f8c0f8d38
Size

84KB
MD5

71124265427250cb2870c24f8c0f8d38
SHA1

fcb92d563b29272f90a8beebf1ad848aa61a7a02
SHA256

6a28c5de57f48e3ad01ad5ea79dab9e8d59ffa6822333487774c059d536d5e24
SHA512

6315536a95b6d71cd6b656a90ae6229d0fa2acab46b9003e212a60fef86815088b027e9ede29af6a6569f6bc27daa63d757b50a000aed3b18236994f42d94a30
SSDEEP

1536:VNhEMb+RLZASx19hZM3x4v3coPeetUKiGo6vclwFy4r:uMb+jX19hKivhme21Go6v4wFy2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71124265427250cb2870c24f8c0f8d38

Files

71124265427250cb2870c24f8c0f8d38
.exe windows:4 windows x86 arch:x86

50194329e039f7615142f3ed88f7fc7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetTempPathA
GetWindowsDirectoryA
GetTickCount
RtlUnwind
CreateFileA
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
WriteFile
CloseHandle
CreateProcessA
ReadFile
IsDebuggerPresent

advapi32

CreateServiceA
CloseServiceHandle
StartServiceA
OpenSCManagerA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 682B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE