aa75378d11080078d7a69eff97727bab6ee556fd3c88242f010c3ff77b6aef1cN[.]exe

General

Target

aa75378d11080078d7a69eff97727bab6ee556fd3c88242f010c3ff77b6aef1cN.exe
Size

46KB
MD5

ed94e2393a37eaab6830017145350010
SHA1

7e59f526accda1d9f73686c4f4777a353e672215
SHA256

aa75378d11080078d7a69eff97727bab6ee556fd3c88242f010c3ff77b6aef1c
SHA512

7f6f8c82be4489511b056171733a79ca6485d249326c5e1106adc6ea77c2550bd4f7c255df23e5f3555a8bb20e3256258e75df4c0f49e208771de4c8365a24df
SSDEEP

768:Tkh/AYZ9aa1tZx3uETiaNcI0+n1upN5qw9+ZIZTXiJwrnJKZa:Tkh/p199NGI0c/NZEWJwrnkZa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa75378d11080078d7a69eff97727bab6ee556fd3c88242f010c3ff77b6aef1cN.exe

Files

aa75378d11080078d7a69eff97727bab6ee556fd3c88242f010c3ff77b6aef1cN.exe
.exe windows:4 windows x86 arch:x86

79d624d156b481aeb2fb4af381938a70

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
SizeofResource
CreateFileA
LockResource
LoadResource
FindResourceA
CloseHandle
DeleteFileA
CreateEventA
SetEvent
CreateProcessA
FreeResource
GetModuleFileNameA
GetWindowsDirectoryA
CreateMutexA
GetLastError
LoadLibraryA
GetProcAddress
Sleep
SetFileAttributesA
FreeLibrary
GetFileAttributesA
CopyFileA
WaitForSingleObject
GetStartupInfoA
GetModuleHandleA

advapi32

OpenSCManagerA
ControlService
DeleteService
CreateServiceA
CloseServiceHandle
OpenServiceA
ChangeServiceConfig2A
StartServiceA
QueryServiceStatus
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceCtrlDispatcherA

msvcp60

??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ

msvcrt

strlen
sprintf
??2@YAPAXI@Z
free
__dllonexit
_onexit
_exit
_XcptFilter
strcat
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strcpy
exit
_stricmp

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

79d624d156b481aeb2fb4af381938a70

Headers

File Characteristics

Imports

kernel32

advapi32

msvcp60

msvcrt

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 39KB - Virtual size: 38KB

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 39KB - Virtual size: 38KB