acef01bc5aa2877391afb4a5f4295fde | Triage

Sharing

General

Target

acef01bc5aa2877391afb4a5f4295fde
Size

12KB
MD5

acef01bc5aa2877391afb4a5f4295fde
SHA1

d053409d4528e704ee1a11e7ae21bf52af2d7456
SHA256

5ea8f4345f1b833122bcba4e211b7e6fb0f6a23d9255b6101e46c4c309daa1ff
SHA512

61c5dea681f9201aea495b3e0e8e9b503b7b21daa705d14bf63668e0ad9ba2f46f097aef6f49a00fc57c27bceabbd6ab743a39966bf0b9aabe506a7c16ca0768
SSDEEP

192:OYfKTCkmI7FJh3RAIi2G2uY6YCu3MMDrCx49m4sLy7QLL+NZ98xBfzL6:OYfMCkff3i2GDCDGQ7QLgz4fzL6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acef01bc5aa2877391afb4a5f4295fde

Files

acef01bc5aa2877391afb4a5f4295fde
.exe windows:4 windows x86 arch:x86

2dcd8ff3118904b1af60531ca67536d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetLastError
GetModuleHandleA
GetModuleFileNameA
lstrcpyA
lstrcatA
Sleep
LoadLibraryA
GetProcAddress
ExitProcess
lstrcpynA
lstrlenA
GetCurrentProcess
CloseHandle

advapi32

QueryServiceStatus
CreateServiceA
CloseServiceHandle
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenSCManagerA
OpenServiceA
StartServiceCtrlDispatcherA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
StartServiceA

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE