de596bb86b68478c1d09105b9d7710d230d5bb7488038556cdd88ae7b4723df5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de596bb86b68478c1d09105b9d7710d230d5bb7488038556cdd88ae7b4723df5
Size

56KB
MD5

e109f0abc0896e0a76ec0183add59551
SHA1

891d3a3de7419ae9257671d0ddcc236f2e39d751
SHA256

de596bb86b68478c1d09105b9d7710d230d5bb7488038556cdd88ae7b4723df5
SHA512

813b2f032e81cbd47bacd7e2826a1b65d1598f33ffe44a6bba501ece0c688423ecd55078f039787808556caf026a953b1cffc7ea6258dd66e484472d7d884af2
SSDEEP

1536:cEmyk3ZWF1UC0CZKFMgnGQuv3rdTbkmqzb:cNpQhCMW/45HkNX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de596bb86b68478c1d09105b9d7710d230d5bb7488038556cdd88ae7b4723df5

Files

de596bb86b68478c1d09105b9d7710d230d5bb7488038556cdd88ae7b4723df5
.exe windows:5 windows x86 arch:x86

6dfbc160505aa2f7205766eaa6fe72a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExA

Exports

Exports

ServiceMain

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 96B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ