734b9920922e06089d1d34ceb906a8f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

734b9920922e06089d1d34ceb906a8f3
Size

138KB
MD5

734b9920922e06089d1d34ceb906a8f3
SHA1

3f7e4454c94a7c8224a721a7856d76a9d491620f
SHA256

5b2d7e2f0bbe41bc61cbe4da7ad14e3e1ef680d68bf90641c6b468ae595d21fb
SHA512

268cdfd7523eaa7cad2d65d3eb5ad706dbda0e9c976040965658efbd97fd066c83075ab65c992014f99d95df99d1469ffaca2b6d3dd92c3e0825dfe86c74dec6
SSDEEP

3072:F0myqqiDm7HRRbVxU0PvcoF1ZBIdzj+57fGfS5RIe:3JqxDbc0tF1fIdOBUS5Ke

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
734b9920922e06089d1d34ceb906a8f3

Files

734b9920922e06089d1d34ceb906a8f3
.exe windows:4 windows x86 arch:x86

71f458a3392b1762de738f2a837c2b3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
CreateFileA
GetFileAttributesA
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
CloseHandle
lstrlenA
GetSystemTimeAsFileTime
RtlUnwind
InterlockedExchange
VirtualQuery
GetSystemDirectoryA
SetCurrentDirectoryA
WritePrivateProfileStringA
GetFullPathNameA

user32

wvsprintfA

advapi32

CloseServiceHandle
StartServiceA
CreateServiceA
OpenSCManagerA

shell32

DragAcceptFiles

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE