7c24a715feed595867ff6c43b915b1e8d6065cabac0b995b6bffb4e9e74856b2 | Triage

Sharing

General

Target

7c24a715feed595867ff6c43b915b1e8d6065cabac0b995b6bffb4e9e74856b2
Size

5KB
MD5

d449928e19e4dfd7eb072911d771f9c6
SHA1

51a009c9d085707a0350b4cc17129c9687b25eb4
SHA256

7c24a715feed595867ff6c43b915b1e8d6065cabac0b995b6bffb4e9e74856b2
SHA512

59c4cdcfe3f7dbd0725e7cae1c5d2bb28300d7f9873afa5718a70555907b516773ffc2ae31ac129281dfe4f29b9ef0cb0f10be62a96277c0b473883d77cd3acc
SSDEEP

96:1hQ+KINu62GnnLMsTU9ig+eGs7YdDjSe97CowhSjdsApAXa6JhduV0:1a+TN52+8iCGsgaseVqyaYhduV0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
7c24a715feed595867ff6c43b915b1e8d6065cabac0b995b6bffb4e9e74856b2

Files

7c24a715feed595867ff6c43b915b1e8d6065cabac0b995b6bffb4e9e74856b2
.exe windows:4 windows x86 arch:x86

72caee80095d7901c5f615baded3f611

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualAlloc
CreateThread
WaitForSingleObject
CloseHandle
GetModuleFileNameA
CreateProcessA
Sleep
GetLastError
GetCommandLineA

ntdll

memcpy
memset
strlen
strcat
strncpy
strcmp

advapi32

SetServiceStatus
RegisterServiceCtrlHandlerA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
StartServiceA
StartServiceCtrlDispatcherA

msvcrt

exit
strtok
malloc

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 512B - Virtual size: 69B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE