7239adbb77f5ec6a5d4c767e59199d8f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7239adbb77f5ec6a5d4c767e59199d8f
Size

39KB
MD5

7239adbb77f5ec6a5d4c767e59199d8f
SHA1

ca4c9dc596f0f0f056055d8e79f6e56ed8c8bf50
SHA256

9dbd57772fc200433165c700282f35cc06a506b8607e4e45e529e60262941995
SHA512

ed1df574c8a2e6a6a346fcdb2c37e583e040e3573047f8c6582bcd54d10a66d08c9cf6d60c78e2e7459b2e5beb9d70756e4e5b2ab4c4de497baf86f407733857
SSDEEP

768:eLimkTnDUV+86HUwmOfvXYQuguL+ZKagrcwV5wKrI:eGmkjDhhYQuCZZgr3wD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7239adbb77f5ec6a5d4c767e59199d8f

Files

7239adbb77f5ec6a5d4c767e59199d8f
.exe windows:6 windows x86 arch:x86

a380312aadc365de92007d166f257cf0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CloseServiceHandle
StartServiceA
CreateServiceA
OpenServiceA
OpenSCManagerA
RegCloseKey
RegSetValueA
RegCreateKeyA
RegSetValueExA
RegOpenKeyA

kernel32

HeapFree
ExitProcess
CreateProcessA
GetEnvironmentVariableA
lstrcatA
GetShortPathNameA
lstrlenA
lstrcpyA
GetCommandLineA
CloseHandle
WriteFile
CreateFileA
QueryPerformanceCounter
GetLastError
Sleep
DeviceIoControl
GetVersionExA
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 486B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ