88846b363c1850dabfa62448461024a2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88846b363c1850dabfa62448461024a2
Size

97KB
MD5

88846b363c1850dabfa62448461024a2
SHA1

3835dbbc267ff7c61b1f0a8dcb7108360ce79758
SHA256

b89be3817bc70c8bae5e3c44ac145a50bb054edcb299a683c0c5e10861fe0a83
SHA512

30e55415283ab6a1113cf426fa24b4cf886d16bfe48e87cb0ce9d160e71ba95cbd7c9e93c3d45ff28abe5f159b4817afe51848e9fe8cb3cceb4dbd88c636a046
SSDEEP

3072:JMWMPfJGJnHGXUmaJDIskH4ObBXh9wDo1n:6PUHBm4DIZYWzKun

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88846b363c1850dabfa62448461024a2

Files

88846b363c1850dabfa62448461024a2
.exe windows:4 windows x86 arch:x86

db35092f999f45342787d983da827ddc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleScreenBufferInfo
GetProfileSectionA
LoadLibraryExA
GetStringTypeExW
PrivCopyFileExW
lstrcmpiA
VirtualUnlock
WriteConsoleInputVDMW
FindClose
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE