b89843e49f609058a08c5feb8c303831 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b89843e49f609058a08c5feb8c303831
Size

19KB
MD5

b89843e49f609058a08c5feb8c303831
SHA1

9bd73338bee88dcf4fb7f4cdac66ff635d5837b3
SHA256

c4491bf35854c045f6e67f29b111d9b1b4d5da1e9c3de47940a0f66acd37e82a
SHA512

9e2fd14579a20d124c7f20e9c16c12b63c1ca5e2337b526171d471f2daad143f4e14af2fbd0a68ec2f9b4f7fce62471a05fd22ca83e4d656e93598114f7cc553
SSDEEP

384:0ZYGJkUzfkRvPu69nNl8tRjgQHDvui/zMP+uhW3fiatO8eHHB9I:MkRvf9NStRjgQHLt/GYFtO8e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b89843e49f609058a08c5feb8c303831

Files

b89843e49f609058a08c5feb8c303831
.exe windows:4 windows x86 arch:x86

3299009894fc8fb0acf034d82f5c2410

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWindowsDirectoryA
DeleteFileA
VirtualFree
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
lstrcpyA
ReadFile
VirtualAlloc
GetFileSize
HeapAlloc
GetProcessHeap
lstrcatA
MoveFileExA
CreateFileA
WriteFile
CloseHandle
SetFilePointer
FindFirstFileA

advapi32

EnumServicesStatusA
OpenServiceA
QueryServiceConfigA
CloseServiceHandle
StartServiceA
OpenSCManagerA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 730B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE