88a40ef2631c26edeebcc74c44d5a777 | Triage

Sharing

General

Target

88a40ef2631c26edeebcc74c44d5a777
Size

54KB
MD5

88a40ef2631c26edeebcc74c44d5a777
SHA1

46a0da7cb5da003f55c9404dea4b5f9a9a598277
SHA256

16a530f0ea11d1116eefe11de8a16bff7edaa694d8f5cc9e029f8f74630bd4ab
SHA512

2d9ce06411385c5070f0b64c1cffaff8b0baa3fad632a79463c85869c4a94f5ea893d8bf285686abc5b43a4fbe8e0f2f09fb327cd988d36f3d5260789551fb59
SSDEEP

768:qlfw0E19HdSLorzRFAvsWFzPXwm0svdMIe0KzEqWO5piJdd/yIzHpPQLDoI/kezd:W3PfdMdzFSLLlfI/k4Aqf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88a40ef2631c26edeebcc74c44d5a777

Files

88a40ef2631c26edeebcc74c44d5a777
.exe windows:4 windows x86 arch:x86

6a4f164f1e484b6cf7179bd534e0ad35

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AllocateUserPhysicalPages
lstrcpyW
GetConsoleHardwareState
GetPrivateProfileSectionNamesA
ReplaceFileW
DeleteTimerQueue
GetComputerNameA
CreateProcessInternalA
VerSetConditionMask
ReadConsoleInputW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE