a42268b06305532ba215f21d108d6107 | Triage

Sharing

General

Target

a42268b06305532ba215f21d108d6107
Size

15KB
MD5

a42268b06305532ba215f21d108d6107
SHA1

0c7b450ebcdb716343bbaa8220f79d35c204fb56
SHA256

bf21de30a6fd43e7f9d5c33a72ea9d9791ce1a6c5d3a06d6ff2cda2f3746bf4b
SHA512

c86e6e9990c74a3ce60e72da0a5286272f8197c3e484d32e4b8f43e878bc5d2c43ac79c28e1a5339b261f276defb6ce07ef5519b66aef32199a10a2f1bea6483
SSDEEP

96:OnYBxbTmBBjkcfrAlhNHc2BywoAJPQYi3K1DntAfdomPdHWsyzUpNyw7b:E+bTQBk4Alh9pBpbtQYQK5YouI1Uz7b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a42268b06305532ba215f21d108d6107

Files

a42268b06305532ba215f21d108d6107
.exe windows:4 windows x86 arch:x86

b093b9b6223af7f9e72d34d8765aa77f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceCtrlDispatcherA

kernel32

CloseHandle
CreateProcessA
ExitProcess
GetThreadContext
ResumeThread
SetThreadContext
VirtualAllocEx
WriteProcessMemory

msvcrt

memset

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 48B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE