56560ab89285acc8a9f75d4a4a32eb81 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56560ab89285acc8a9f75d4a4a32eb81
Size

17KB
MD5

56560ab89285acc8a9f75d4a4a32eb81
SHA1

dedb2409cf4555ded87b47ff3873fc1340895918
SHA256

4ba672056bfd67b144f5778db7101e481d54b4a6ee317a2c990d9fbf4ff32c83
SHA512

0bd24ac957b16d253c7f017a9e84651868b436052ff10b7830513b4fbbb4739d1b61d97d8f139174038e2f1478f1d4344d68ddc00aee6293757ca1cf44493b73
SSDEEP

384:mFIwAxv1cmZO2Zp+Nye8pqrmub8TyztsDN:mqTv1oKK8o8TyJc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56560ab89285acc8a9f75d4a4a32eb81

Files

56560ab89285acc8a9f75d4a4a32eb81
.exe windows:4 windows x86 arch:x86

1e4c0da5737da53aff5e6e0ab7de1efa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
ExitProcess
OpenMutexA
Process32First
Process32Next
Sleep
CreateToolhelp32Snapshot
CreateMutexA
CopyFileA
OpenFile
CloseHandle
FindClose
FindFirstFileA

advapi32

RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE