02188bba20b08dcd331dc9ef5c42788148931d022c5a743db09b4d9b8902ae83 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02188bba20b08dcd331dc9ef5c42788148931d022c5a743db09b4d9b8902ae83
Size

76KB
MD5

7f4a2e0b18c8af13b2c32ba059449606
SHA1

1a46f558c01a6a16cbdb0c539cc740085fe871d8
SHA256

02188bba20b08dcd331dc9ef5c42788148931d022c5a743db09b4d9b8902ae83
SHA512

c13e1ff21f433c14e99fd1c187c2dd91caed6ad4d946923d0fba795c509e74cd03e11736af336c0b30ba7bd507c014a51de1e466b876516a88dc744d12d86af9
SSDEEP

1536:sK93wiHrKijOdJpe9H/Pt6A/QwD/ctsU/edhZKz/U85:s83kglXFD/S5ekT5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02188bba20b08dcd331dc9ef5c42788148931d022c5a743db09b4d9b8902ae83

Files

02188bba20b08dcd331dc9ef5c42788148931d022c5a743db09b4d9b8902ae83
.exe windows:4 windows x86 arch:x86

e532dd10cbd79167aed4f1e866ebe5d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextFileW
GetBinaryType
ReplaceFileW
OpenSemaphoreW
GetCurrentProcessId
RtlUnwind
SetConsoleKeyShortcuts
TlsAlloc
IsBadStringPtrA
GetCommTimeouts
GetConsoleCP
LZStart
FreeLibrary

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE