8d14980726837abe59d8d2920e6b1e61 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d14980726837abe59d8d2920e6b1e61
Size

139KB
MD5

8d14980726837abe59d8d2920e6b1e61
SHA1

48694029bd7d25a7a4bf53cb6366968419c7b130
SHA256

34a4990392cc02ae78c928c7af8f48393555fc08cbe15ac02531647bc638478e
SHA512

c2e577e5320ec013482110e58440c9c6f2477cb28461da7bc66978a2b426ece5dd743bad72f7f28136105b322bc29b037821f0cc234ba52321a6ec643a6c2db5
SSDEEP

3072:RlB+fOqTNO/6GwCuDAUyJLywt7mmjlowz7TBfVlyOKWfTzV+0:Rlk2Ug3t1mmjb7TBtlyOKWfTJ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d14980726837abe59d8d2920e6b1e61

Files

8d14980726837abe59d8d2920e6b1e61
.exe windows:4 windows x86 arch:x86

974c3a596879f92fe01cc9a10c1dfee3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
SetCurrentDirectoryA
GetSystemTimeAsFileTime
RtlUnwind
InterlockedExchange
VirtualQuery
GetFileAttributesA
GetLastError
CreateFileA
WriteFile
CloseHandle
WritePrivateProfileStringA
GetFullPathNameA
lstrlenA

user32

wvsprintfA

advapi32

CloseServiceHandle
ChangeServiceConfigA
ControlService
OpenServiceA
CreateServiceA
EnumServicesStatusA
OpenSCManagerA
StartServiceA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE