cabeb0c31210185988f2b183db26be0b | Triage

Sharing

General

Target

cabeb0c31210185988f2b183db26be0b
Size

16KB
MD5

cabeb0c31210185988f2b183db26be0b
SHA1

8f24b12db9cedddfa0a2bb0a2afe4602bf07f6ab
SHA256

60aee01e8d9d85939cf00977388a221022501ad51e2511724c17c007dae13583
SHA512

4b529528a1db2973a87f1f73b5678914787e43bdea662774bc0ebfe216a2b931b453bed2a1f7a0b9553bf974be11df0f3275d6cb6ea660b73861950f9ca23e9a
SSDEEP

192:B2ixd4hHceiNNSziE0SjSbSGUn+HaahUE92MnRwUhVVgL9KSQWVOsVgp5:xxd4hRLjSb8+hhT2MRL7gL4xWVOs2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cabeb0c31210185988f2b183db26be0b

Files

cabeb0c31210185988f2b183db26be0b
.exe windows:4 windows x86 arch:x86

4b4dc34d63bd942681c3b69e179c1636

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
SizeofResource
CreateFileA
LoadResource
FindResourceA
CloseHandle
GetFileSize
SetFileAttributesA
lstrcatA
GetSystemDirectoryA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetVersion
ReadFile
GetModuleHandleA
HeapAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
ExitProcess
GetProcessHeap

advapi32

OpenSCManagerA
OpenServiceA
CloseServiceHandle
ControlService
StartServiceA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ