88c1213efb6c731711d915194ddb0d285f83ce44cccc0c13cf7b0901ea43c5c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88c1213efb6c731711d915194ddb0d285f83ce44cccc0c13cf7b0901ea43c5c2
Size

11KB
MD5

20fe9658bf29c4d10642df0ee6b5d228
SHA1

2bd12e8e8ce145caa9fff207dd5517752ecf6cad
SHA256

88c1213efb6c731711d915194ddb0d285f83ce44cccc0c13cf7b0901ea43c5c2
SHA512

f7c61fc51cc5a8336688acc90070087b72bbfcd9d137816a035cb483521cc091c7f263ab9326fb6c7d0ad5096db96a3534083316989f844aafcb4c7a84e12419
SSDEEP

96:1qYrVF+Sn2b6+4R5fp6CPHPtboyne39EYbks/tQ3nKxDvv4bd97gytgzry879:1qg4Rmzfp6CPP1oynzWEKVgx97FW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88c1213efb6c731711d915194ddb0d285f83ce44cccc0c13cf7b0901ea43c5c2

Files

88c1213efb6c731711d915194ddb0d285f83ce44cccc0c13cf7b0901ea43c5c2
.exe windows x86

b2e07f549f2ab532996ffad5a5331914

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetTempPathA
ReleaseMutex
GetModuleFileNameA
GetLastError
CopyFileA
GetPrivateProfileStringA
lstrcpyA
lstrlenA
GetModuleHandleA
Sleep
WaitForSingleObject
CreateMutexA
CloseHandle
GetStartupInfoA

user32

wsprintfA

msvcrt

_XcptFilter
exit
_acmdln
_exit
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strstr
atol
strlen
__getmainargs

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

shell32

ShellExecuteExA

shlwapi

PathRemoveFileSpecA
PathFileExistsA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ