a33d450510988566907a9b9feae685a1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a33d450510988566907a9b9feae685a1
Size

209KB
MD5

a33d450510988566907a9b9feae685a1
SHA1

43207b4940955a0a43401a17b89481aa3b91ea9e
SHA256

32e4c7f53649817c51a83fdff965663c3887d8d7bf60d9e553552bb25a2e180e
SHA512

fb93fb632395db991fa5d3e29227cbae5889276aae3f2ae743d6ae92f6a4416305316b5c0bd2c3ea5f1a6137a1fe1957d297be9f7447db1247e49d1e477743e6
SSDEEP

3072:DrYwShpQB7hXPcuT/LNBV09P96a+ztKZSuGGPOfCDyJLpSIEIHKJQnFVYe8J82:Dmh0cuTLy3tutfLLpR/q+Sh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a33d450510988566907a9b9feae685a1

Files

a33d450510988566907a9b9feae685a1
.exe windows:4 windows x86 arch:x86

41e6f44900f4fd6cdfcf0ea6f4517540

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
SizeofResource
LockResource
Sleep
GetSystemDirectoryA
WriteFile
GlobalAlloc
CreateFileA
GlobalFree
CloseHandle
FindResourceA
MoveFileA

user32

LoadIconA
LoadCursorA
CreateWindowExA
ShowWindow
UpdateWindow
DefWindowProcA
RegisterClassA

gdi32

GetStockObject

advapi32

CloseServiceHandle
OpenSCManagerA
CreateServiceA

shell32

ShellExecuteExA

msvcrt

memset
strcat
strcpy
memcpy

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 912B - Virtual size: 906B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 272B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 205KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ