9a92040a94b1abf891ab20897deaa6b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a92040a94b1abf891ab20897deaa6b6
Size

138KB
MD5

9a92040a94b1abf891ab20897deaa6b6
SHA1

25ad68764c9c62dc390617b1766fd3195c21148b
SHA256

5b8fe220f2ab2e05c1e6cdc1b3b318a6bb5eae3313383bf39b4b29fd7680ca85
SHA512

d00bf4a6c13f8355de1d454b85103016df825f939712fcaa66ea998c54fa249199fca1f6be299be0d41f13eb2c9fd85025d3623b2ed479b6ac0758b52c6b0927
SSDEEP

3072:F0myqqiDm7HRRbVxU0PvcoF1ZBIdzj+57fGfS5R48:3JqxDbc0tF1fIdOBUS5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a92040a94b1abf891ab20897deaa6b6

Files

9a92040a94b1abf891ab20897deaa6b6
.exe windows:4 windows x86 arch:x86

71f458a3392b1762de738f2a837c2b3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
CreateFileA
GetFileAttributesA
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
CloseHandle
lstrlenA
GetSystemTimeAsFileTime
RtlUnwind
InterlockedExchange
VirtualQuery
GetSystemDirectoryA
SetCurrentDirectoryA
WritePrivateProfileStringA
GetFullPathNameA

user32

wvsprintfA

advapi32

CloseServiceHandle
StartServiceA
CreateServiceA
OpenSCManagerA

shell32

DragAcceptFiles

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE