aba8ade6398fefc9211f5aa814587b1157c4aa413eb7ff0da8feb37a29b2b615

General

Target

aba8ade6398fefc9211f5aa814587b1157c4aa413eb7ff0da8feb37a29b2b615
Size

364KB
MD5

9c2c043570ec322e67c3c2b28cbc03f5
SHA1

1954082dfcbc7051292b75fe446ed3599d70e85d
SHA256

aba8ade6398fefc9211f5aa814587b1157c4aa413eb7ff0da8feb37a29b2b615
SHA512

eeeff063a4704dfc16cfdb51c57c35f6d37d6c2a07bf8b636d9bf69c1f4d95d379da6f385dcc896128d224b73c7d7e019fc7a470a3cfc770027e411e41cbc72b
SSDEEP

384:0xKrOKg6LQJOf8So8tFHZxSITh7NozxJ8T5ztO3iLzVCKe0yoxsc22rw2FB9og3a:HLQ9S91vSCp86nOwzU4aoZB9ot

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aba8ade6398fefc9211f5aa814587b1157c4aa413eb7ff0da8feb37a29b2b615

Files

aba8ade6398fefc9211f5aa814587b1157c4aa413eb7ff0da8feb37a29b2b615
.exe windows:4 windows x86 arch:x86

36d0a1ceaaabc64d3ba825b9c290ed44

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringA
GetCurrentDirectoryA
GetSystemDirectoryA
SetEndOfFile
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetLastError
CloseHandle
WriteFile
ReadFile
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
VirtualAlloc
SetStdHandle
FlushFileBuffers
SetFilePointer
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
LCMapStringW

user32

wsprintfA

advapi32

ChangeServiceConfig2A
OpenSCManagerA
CreateServiceA
CloseServiceHandle
OpenServiceA
StartServiceA

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shell
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

36d0a1ceaaabc64d3ba825b9c290ed44

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 24KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 12KB - Virtual size: 15KB

.shell Size: 320KB - Virtual size: 320KB

.text
Size: 24KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 12KB - Virtual size: 15KB

.shell
Size: 320KB - Virtual size: 320KB