9e1ad11b65cd1df2756eb17195b5dac3f9c5bc0138eae028c92ddddca5f2b159N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9e1ad11b65cd1df2756eb17195b5dac3f9c5bc0138eae028c92ddddca5f2b159N
Size

56KB
MD5

6c8d3e4634ae09f5ad9b8fcdf040f3a0
SHA1

a6dfc0a69e05e81dc29404b577b483224f1795b2
SHA256

9e1ad11b65cd1df2756eb17195b5dac3f9c5bc0138eae028c92ddddca5f2b159
SHA512

4d047aab011add7087c4440cc42c06034ac265184f26b88029dca7ea94fd9fd453d0a8ec959c0f1b50737b32c5f174a43855156d123def22b13d0b9a8ec1d9e0
SSDEEP

1536:jsiCao6ejYsWNFAeC0KZRzNoDdzEfESIx9:z06ek3AeC0KvzOZzAE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9e1ad11b65cd1df2756eb17195b5dac3f9c5bc0138eae028c92ddddca5f2b159N

Files

9e1ad11b65cd1df2756eb17195b5dac3f9c5bc0138eae028c92ddddca5f2b159N
.exe windows:5 windows x86 arch:x86

6dfbc160505aa2f7205766eaa6fe72a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExA

Exports

Exports

ServiceMain

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 96B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ