88e741ba49731371831676c38e16eb4d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88e741ba49731371831676c38e16eb4d
Size

171KB
MD5

88e741ba49731371831676c38e16eb4d
SHA1

e48b3f33fc7992c9fd5a00272a7f7792be345511
SHA256

67c3aca5ccc5be3252d437b7688fd9803050fcb22f8b690223be2dedb79439f0
SHA512

e75229977c02d4e313af97fdee9362b04a403d4b823191363d58da7fa6b3f63af2ff190e2a912c092d7bbc2ed6057aa83a5bff8a9c446b2508890eaad1b468c9
SSDEEP

3072:77n6GvsLp2ABdB8uzfybA93kZeszlbpzFsASah2aNA1I:7THcrLzfeAJkYszjxJ1NA1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88e741ba49731371831676c38e16eb4d

Files

88e741ba49731371831676c38e16eb4d
.exe windows:5 windows x86 arch:x86

05f1dacc13431276d2d9a4bd6cded34c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

L:\hwbSLfw\hrgXdjx\alrorkuoQO.pdb

Imports

kernel32

SetMailslotInfo
GetThreadTimes
GetModuleHandleA
CloseHandle
SetHandleCount
GetLastError
WideCharToMultiByte

shlwapi

PathMakeSystemFolderW

advapi32

RegQueryValueW
RegQueryMultipleValuesA
RegQueryMultipleValuesW

user32

MessageBoxIndirectA
MessageBoxIndirectW
MessageBeep
KillTimer
GetTopWindow
GetWindowRect
GetForegroundWindow

ntdll

RtlCompareMemory

Exports

Exports

?InsertCustomData@@YGKXZ

Sections

.text
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack1
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ