be972e7ae5a6b25d6f21df1e838a27ad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be972e7ae5a6b25d6f21df1e838a27ad
Size

11KB
MD5

be972e7ae5a6b25d6f21df1e838a27ad
SHA1

f50a4921e7d567516c499b525ba3f9d3ed28b9f1
SHA256

8172d2f7ed2ef3e515761800646928c9a45f291ad9aeda3c877c87b2f0aec563
SHA512

ee2ea72a0af4a99114d166a9b88e2761f297529dda501abfbeb996db73bb0b27c9a4757b3561ed52232161f6655eadbb9b775aabb30c94b3f8541ea38a5e003a
SSDEEP

192:x8lwqMevolnF+uiMoqjStgIhrAzesAhtNguqqLpmPpON6k:AMAaQ7tF+zG37jpmPsE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be972e7ae5a6b25d6f21df1e838a27ad

Files

be972e7ae5a6b25d6f21df1e838a27ad
.dll windows:4 windows x86 arch:x86

eacaf68d9d036f14ced801e85a5f69cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
WriteFile
CreateFileA
GetLastError
FreeLibrary
GlobalFree
LoadLibraryExA
GetCurrentProcessId
GetProcAddress
GetModuleHandleA
lstrcatW
GetSystemDirectoryW
LoadLibraryA
DeleteFileA
GetWindowsDirectoryA
Sleep
DeviceIoControl
GetFileAttributesA
CreateToolhelp32Snapshot
Process32First
Process32Next
GlobalAlloc
CloseHandle

advapi32

StartServiceA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
ControlService
DeleteService
CreateServiceA

msvcrt

_strcmpi

Exports

Exports

RSDK

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ