88f085181dd0c9de272d343426e61316 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88f085181dd0c9de272d343426e61316
Size

151KB
MD5

88f085181dd0c9de272d343426e61316
SHA1

1725783ea696451393e0f3da65063ecf6ee0a3a7
SHA256

292b3449f24514da94721335f0b11e31272c5c06cf0778054eb560116dec4c73
SHA512

7d66cea03ca6390bd7a9a72a17508aa33697e27a054df24af40d78d48240813d21f149e4032e22c3912b84032e637a5c8fb57d8f4b7bc66910a95de483fa0ad5
SSDEEP

3072:pY4p7/Edkhqi6LqrCeEeSsMbODPaHmUt1a:eMgWhqUEeSseaaNtc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88f085181dd0c9de272d343426e61316

Files

88f085181dd0c9de272d343426e61316
.exe windows:4 windows x86 arch:x86

dd211e2c83c9b4642c33fed8c81b90d3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

strncmp
strchr
sprintf
_itoa
_chkstk
atoi
strstr
strncpy
memset
RtlRandom

kernel32

lstrcpynA
VirtualFree
VirtualAlloc
OpenProcess
SetCurrentDirectoryA
GetTimeZoneInformation
GetCurrentProcessId
GetWindowsDirectoryA
GetSystemDirectoryA
ReadFile
Sleep
CloseHandle
WriteFile
SetFilePointer
CreateFileA
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
HeapFree
HeapAlloc
GetProcessHeap
GetSystemTime
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetLastError
GetLocalTime
GetCurrentDirectoryA

psapi

GetModuleFileNameExA

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 119KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE