c88f6e67c5319f64cf5cca116471e429 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c88f6e67c5319f64cf5cca116471e429
Size

98KB
MD5

c88f6e67c5319f64cf5cca116471e429
SHA1

539cf5158c6b993a2200155a627677b389573afe
SHA256

f0063fdb42caea25919cfd7bc1a157cb7c21dc8e4971a5ef0aff0300f6ee70d8
SHA512

bfa1f710b9ad489f40e82d36318e69c705245e68fb6a618cb7fef7b0302a690e8129703050e84f78f380dbd2965b49c01a042b945e2e1dca13c20c92512c7906
SSDEEP

1536:o1LbID+upCWAwCXaqsDZtB1usrSdRczAjTsfY8HGflBT849jsATpHe3xNRzDtH1:Qc6u8n/qqszP2Kcsg8HGtGeTJUNRzL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c88f6e67c5319f64cf5cca116471e429

Files

c88f6e67c5319f64cf5cca116471e429
.dll windows:4 windows x86 arch:x86

e1112b6722a3cce6443d7e0d778068c4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitThread
FindResourceA
SetCurrentDirectoryA
SetLastError
ExitProcess

msvcrt

__p__commode
__set_app_type
fprintf
swscanf
wcscat

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ