88959e68f1267cf1e8102d05fbee376c | Triage

Sharing

General

Target

88959e68f1267cf1e8102d05fbee376c
Size

56KB
MD5

88959e68f1267cf1e8102d05fbee376c
SHA1

f12f6d71b278eaf1b9d68d1b41078439f6364edb
SHA256

0797a64b5c4ec2b0f87325b693aa6b2ff3b66932379dbf56af9734b8043d08f1
SHA512

5d834b642117ed3583407295a17ecf0ea801dead1321e076ab8536054eb512f3c3e0f5edff598db59823560a680ab8e6954c81043a8e52abc4b6332d4b5750b7
SSDEEP

1536:k6ENai1JI8CiLU5zKnGHb0Lb+T+Hm7xFovm6gU:wsi1q8346GHbsCCCxGvmNU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88959e68f1267cf1e8102d05fbee376c

Files

88959e68f1267cf1e8102d05fbee376c
.exe windows:4 windows x86 arch:x86

1ea22cc37755f5a438d8d542749c0262

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnregisterConsoleIME
SystemTimeToTzSpecificLocalTime
SetTapeParameters
CreateMailslotA
lstrcpyn
ValidateLCType
FatalAppExitA
VerLanguageNameW
SetProcessShutdownParameters
SetThreadAffinityMask

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE