b88cbe0fb02beda2d50294dcd730c0d4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b88cbe0fb02beda2d50294dcd730c0d4
Size

289KB
MD5

b88cbe0fb02beda2d50294dcd730c0d4
SHA1

744bf0b2262ce29b02d42755c74a3fc60b4ceb8e
SHA256

8e4103cd280c391ef725cdf3ccb54be8e82f9cc40e7e656776a6c62daf9cdf67
SHA512

09dd0da08f23a19792e5a650b536db5cecaeba36540f82c855a82f9197e2db5290e3713f1598539ad71ba6463e3d393acde7451c609602b4eaa442ccc1a75a46
SSDEEP

6144:CBUPOX4hfHoz6r5LUTBPMUlFlKpIlnfWHQA8sWW/0EJUiuO8Iin5:C6COpUmUl3LROwA8sZM8uO4n5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b88cbe0fb02beda2d50294dcd730c0d4

Files

b88cbe0fb02beda2d50294dcd730c0d4
.exe windows:4 windows x86 arch:x86

13a380d0688da8583f34506e346ea449

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
CompareStringA
GetCurrentProcessId
ReleaseSemaphore
DeleteAtom
GetStdHandle
DeviceIoControl
SetFilePointer
GetConsoleMode
GetModuleHandleA
FreeLibrary

user32

SendMessageA

Sections

iWkbAszF
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

NdFWRJSE
Size: 1024B - Virtual size: 666B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

AAyKtqkG
Size: 259KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE