fdb674c83cce65ec0ab8a2af2629ee17f1e99ce348c859b068672bece8b11883

General

Target

fdb674c83cce65ec0ab8a2af2629ee17f1e99ce348c859b068672bece8b11883
Size

52KB
MD5

a9583d02a9c704743f09fbbd5b7227e2
SHA1

ed236c5e53933c871ccfaa3bf9c2dbe81a44f79d
SHA256

fdb674c83cce65ec0ab8a2af2629ee17f1e99ce348c859b068672bece8b11883
SHA512

3ebce72010d21d759a3f36dbc9f1bb0586ddf627ff81dd900ae24f1c7b6ec5a1a170f24e2e082f45b1f3369591d928512c584dd895e2d3e3abe807aab7b8f7b0
SSDEEP

768:uELEn5fTO+54tFGMhiHa7Pll1wpEPHvWt6sBkg7WxZWDy72MrVUfDl+wwjXUy6ag:u7nJh4aX6CEPHq7WAyypfarg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdb674c83cce65ec0ab8a2af2629ee17f1e99ce348c859b068672bece8b11883

Files

fdb674c83cce65ec0ab8a2af2629ee17f1e99ce348c859b068672bece8b11883
.exe windows:4 windows x86 arch:x86

3fc339fb72e118735fb9f1667468eeba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

CloseServiceHandle
CreateServiceA
DeleteService
OpenSCManagerA
OpenServiceA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA

kernel32

AddAtomA
CreateMutexA
ExitProcess
FindAtomA
GetAtomNameA
GetLastError
InterlockedIncrement
ReleaseMutex
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
WaitForSingleObject

msvcrt

_strcmpi
_strdup
__getmainargs
__p__environ
__set_app_type
_assert
_cexit
_fileno
_fmode
_iob
_onexit
_setmode
abort
atexit
fprintf
free
fwrite
malloc
memcpy
memset
printf
realloc
signal
strcmp
strcpy
strlen
strncpy
strtol
strtoul

user32

MessageBoxA

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3fc339fb72e118735fb9f1667468eeba

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

user32

Sections

.text Size: 43KB - Virtual size: 42KB

.data Size: 1024B - Virtual size: 576B

.rdata Size: 4KB - Virtual size: 3KB

.bss Size: - Virtual size: 16KB

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 932B

.text
Size: 43KB - Virtual size: 42KB

.data
Size: 1024B - Virtual size: 576B

.rdata
Size: 4KB - Virtual size: 3KB

.bss
Size: - Virtual size: 16KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 932B