88a34291cb39c9c36afb72a01dfa1b54 | Triage

Sharing

General

Target

88a34291cb39c9c36afb72a01dfa1b54
Size

165KB
MD5

88a34291cb39c9c36afb72a01dfa1b54
SHA1

05ae0eca37a71674a9f4aa43f57adf6dd3949b30
SHA256

e8e4ba809f0a213a48a89273806db439127511474910bed95a2857c9ca44461c
SHA512

9a2d5163257368ad964596df80f8abde78b7f56e567e1e1b6139e3107037fcc80eadeb5644514ec2563347006e3fe565db8c56f9f74718d54e0a06f9ed7eeb2e
SSDEEP

1536:QxtLuz2Zb+eB2O1xXDWH9Y1E13bBDeLNxSiWfPYJjWzOdTh4S86:YLF819Y1EdkSjPgjWzOdTh9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88a34291cb39c9c36afb72a01dfa1b54

Files

88a34291cb39c9c36afb72a01dfa1b54
.exe windows:4 windows x86 arch:x86

fa5834aa544cc65768693b90311265c9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetStdHandle
GetDiskFreeSpaceExA
GlobalFree
SetEvent
GlobalUnlock
GlobalLock
GlobalAlloc
VirtualAlloc
GetThreadLocale
DefineDosDeviceA

tapi32

lineSetCallData

user32

GetWindowThreadProcessId
GetWindow
TrackMouseEvent

Exports

Exports

Dbsmorwe
ReadAnqaqrvy

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE