b5134d3a228323f25edf0e039754b4ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5134d3a228323f25edf0e039754b4ea
Size

20KB
MD5

b5134d3a228323f25edf0e039754b4ea
SHA1

4c025debc58440df3322ee6b7253fbded6e69df4
SHA256

50da4c5366890752bbbafe6ace4216226c5984b84f434d3e40e8c668d0af9583
SHA512

a85358f2882365bd9ccd965dc7fced349ecd6acd6fcf353f156a53e91d03f68249f35a6b60c8370b187316752f1979e05226f05821d9846085e662f5f247a8be
SSDEEP

96:YftdITYkvSWakiaLySA0FgkkFdQctCw+Jd4oyn:otdItvSPa+SA2A3jGJd4oyn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5134d3a228323f25edf0e039754b4ea

Files

b5134d3a228323f25edf0e039754b4ea
.exe windows:4 windows x86 arch:x86

aa65f4979580548c4665194d72797c0e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
CreateEventA
WaitForSingleObject
CloseHandle
SetEvent
CreateThread

advapi32

StartServiceCtrlDispatcherA
SetServiceStatus
RegisterServiceCtrlHandlerA

msvcrt

__dllonexit
_onexit
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

msvcp60

??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ