c5531c17b1c23d9c8607022534a199a5 | Triage

Sharing

General

Target

c5531c17b1c23d9c8607022534a199a5
Size

94KB
MD5

c5531c17b1c23d9c8607022534a199a5
SHA1

bd45cbd205661d63ca0f7406e14f9aabb20a76bc
SHA256

17753170350a9573c26793264d46b266c52110b90e2ae6a73457b99d1c99240b
SHA512

ad6f5d24bcc3d36622ed16bc20b5df31e15ee6603189a59851323d66c8bdb2d5f649adc25f353f58ce35f25c0f726244548adabf3db18cbaede8ea89c3ca20e9
SSDEEP

1536:zNhEMb+RLZASx19hZM3x4v3coPeetUKiGo6:MMb+jX19hKivhme21Go6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5531c17b1c23d9c8607022534a199a5

Files

c5531c17b1c23d9c8607022534a199a5
.exe windows:4 windows x86 arch:x86

50194329e039f7615142f3ed88f7fc7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetTempPathA
GetWindowsDirectoryA
GetTickCount
RtlUnwind
CreateFileA
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
WriteFile
CloseHandle
CreateProcessA
ReadFile
IsDebuggerPresent

advapi32

CreateServiceA
CloseServiceHandle
StartServiceA
OpenSCManagerA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 682B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rfzrurt
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE