1888b8a6c92e968810d4ea0c0548aa16 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1888b8a6c92e968810d4ea0c0548aa16
Size

156KB
MD5

1888b8a6c92e968810d4ea0c0548aa16
SHA1

330fe192ec08a79b23afc4a4c08931e0c0f4b73e
SHA256

7f8a8c809b7e3471e0c29642f9d56fe1c249e1f7526930634d6cef5b3fb58006
SHA512

fb33c564a3488e704f65a15039c476ef5625883f81c2be633506df24a0f2f67bf67af117e1ef1e19aa31cbc2a64400034e76851c78c660d981e037fbaf2c0dd5
SSDEEP

3072:yvB41YLZoqNOJcsKJUDG2wM6h6WDSdY6JVGBd986CVrHH+ns89Q:Sq1Q8cskUUMx1FRbVjus89

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1888b8a6c92e968810d4ea0c0548aa16

Files

1888b8a6c92e968810d4ea0c0548aa16
.exe windows:4 windows x86 arch:x86

2a7e5c9ff40b053d948a0f9f518cb743

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryDosDeviceW
GetEnvironmentStringsW
CancelDeviceWakeupRequest
GetSystemTimeAsFileTime
DisconnectNamedPipe
LCMapStringW
FindResourceA
SetCommMask
GetCommandLineW
GetLogicalDrives
TerminateProcess
WaitForMultipleObjectsEx
ProcessIdToSessionId
GlobalMemoryStatusEx
SetEndOfFile
GetLocaleInfoA
VerLanguageNameW

user32

DdeUninitialize
UnionRect
BeginPaint
ActivateKeyboardLayout
SetProcessWindowStation
HideCaret
DdeSetUserHandle
IsDialogMessageA

gdi32

AbortPath
SetWindowOrgEx

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE