8bb5c4c4fd55166bf611b329510d044e

General

Target

8bb5c4c4fd55166bf611b329510d044e
Size

32KB
MD5

8bb5c4c4fd55166bf611b329510d044e
SHA1

6835b19f07330bc439468c62593b00826d0836ec
SHA256

d1c210b24bd4ee8e5b56732ca969028f4686a241a6e6742558dcd82af7812e5e
SHA512

b5f915c162ec395444bc421bf8ca109910a4499864bd5b8e0ed2ead6bf83bc62cf78949700d0ddcaad7b03f958cf1acac99e3cd0ce16c3b4a34bbf2372af62da
SSDEEP

768:inLgrvA4FAPQf11MMDLap7ihBarFwFqwNyG:inLgTA4sQf/T/IihBayFkG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bb5c4c4fd55166bf611b329510d044e

Files

8bb5c4c4fd55166bf611b329510d044e
.exe windows:6 windows x86 arch:x86

e20b2d04d2770006a076712da5f8917c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\programs\futuregeneration\startdrv3\objfre_wxp_x86\i386\StartDrv3.pdb

Imports

advapi32

CloseServiceHandle
StartServiceW
CreateServiceW
OpenServiceW
OpenSCManagerA
RegCloseKey
RegSetValueW
RegCreateKeyW

kernel32

HeapAlloc
GetProcessHeap
HeapFree
FreeResource
LockResource
SizeofResource
LoadResource
FindResourceW
CloseHandle
WriteFile
CreateFileW
ExitProcess
GetEnvironmentVariableW
lstrcatW
lstrcpyW
GetShortPathNameW
GetModuleFileNameW
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
QueryPerformanceCounter
GetLastError
DeviceIoControl
CreateFileA
GetModuleHandleW
GetVersionExW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

shell32

ShellExecuteW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 426B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e20b2d04d2770006a076712da5f8917c

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

advapi32

kernel32

shell32

Sections

.text Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 812B

.rsrc Size: 25KB - Virtual size: 25KB

.reloc Size: 512B - Virtual size: 426B

.text
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 812B

.rsrc
Size: 25KB - Virtual size: 25KB

.reloc
Size: 512B - Virtual size: 426B