9987b95411769a66a893a536baeb2331 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9987b95411769a66a893a536baeb2331
Size

860KB
MD5

9987b95411769a66a893a536baeb2331
SHA1

9d78df8d2c217cd2c509c6354b36dbaf5a381194
SHA256

c180ec54805a0a327aa7f8ba34eb9d4cd5b2a323b9e4d6570ea097883a1473dc
SHA512

0e2c9f8c625af631385d525673260326a8b47260781d3a3b74c48f31692f2a3a80f62389be7a4ce3a48eff72561392ab1d8e7d1ca0db3b0f0ff90224d805fc83
SSDEEP

24576:T+7P8h5/KgwSDqXsAJwB2W77ao4qdxBIjyiq3rs:+8h5/QqmjJwLTfBoR1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9987b95411769a66a893a536baeb2331

Files

9987b95411769a66a893a536baeb2331
.exe windows:0 windows x86 arch:x86

204693aa89ecdf15c4c069c311cb6852

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

advapi32

CloseServiceHandle
CloseTrace
ControlService
CloseEventLog

kernel32

GetModuleHandleA
CreateFileA
GetLastError
WriteFile
ReadFile
GetVersionExA
ExitProcess
CloseHandle
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
TerminateProcess
CreateThread
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime

Sections

.text
Size: 289KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 554KB - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 716KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ