7af2984036b5561b7e6c074964096a05 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7af2984036b5561b7e6c074964096a05
Size

27KB
MD5

7af2984036b5561b7e6c074964096a05
SHA1

6297204a412eee564cc9aa857e57259af30a6f6a
SHA256

dd46a6de00bdce59121657d7f4c7a42304a26c51fbebc974693bb470575e39ae
SHA512

e810386e0b236f6111e1a5c5f571f940d8254099728a200c3b7b2eeb39e15724bc45dd2e9f842611167d2b0cfeb17fed668f9d4fb197220ccfe7a169fca00dd2
SSDEEP

384:24Og9e+8a+T4MHrQEz4rsKjjWC4KGNOErn/MAS:2Rg9e7tLQEz4tZAvjS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7af2984036b5561b7e6c074964096a05

Files

7af2984036b5561b7e6c074964096a05
.exe windows:4 windows x86 arch:x86

1c291ceecff37862526b831083be646e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

CloseServiceHandle
CreateServiceA
OpenSCManagerA
RegCloseKey
RegOpenKeyExA
RegSetValueExA

kernel32

AddAtomA
CloseHandle
CreateToolhelp32Snapshot
ExitProcess
FindAtomA
FreeLibrary
GetAtomNameA
GetDriveTypeA
GetExitCodeProcess
GetModuleFileNameA
GetProcAddress
GetSystemDirectoryA
GlobalAlloc
GlobalFree
LoadLibraryA
OpenProcess
Process32First
Process32Next
SetUnhandledExceptionFilter
TerminateProcess
lstrcatA
lstrcpyA
lstrlenA

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fflush
fopen
fprintf
free
malloc
memset
signal
strcmp
toupper

user32

SystemParametersInfoA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE