88013014b32b18a91dd061247829e790 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88013014b32b18a91dd061247829e790
Size

253KB
MD5

88013014b32b18a91dd061247829e790
SHA1

5936aceaa97f873ff23100a6af064ebd1301113d
SHA256

e23d1b54fdafa79b56fc059b62c9852af4e858cf848d5b2f50c1465e52805cea
SHA512

2ad0a9a49db8c7ada46fdf333226cd54a9b1b31114aa07298d1dc06574b95973e7e64caa34af753a902fd8e1b26d2d2b9616b82b3ef6326a6b0bb5b1f74dc62f
SSDEEP

6144:BCjGTG8qB4CR6B3/Wl/+jPct8mMohomPm4DbwUmcMU:BCjGdUzw3W/c4MohFPm44Bk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88013014b32b18a91dd061247829e790

Files

88013014b32b18a91dd061247829e790
.exe windows:4 windows x86 arch:x86

8becd5bd582d3018ec090c1c7f4d538f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
RtlUnwind
CreateSemaphoreW
CompareFileTime
ReleaseSemaphore
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLocalTime
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
CreateSemaphoreW
ReleaseSemaphore

oleaut32

DispGetIDsOfNames
OleLoadPicture
VarCyFromDec
GetErrorInfo
SetErrorInfo
VariantClear
OleLoadPictureEx

advapi32

RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA

ole32

CoTaskMemRealloc
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree

shlwapi

PathFindExtensionA

Sections

.text
Size: 126KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 286B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ