554206746287714f2af0bbba784d5dd5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

554206746287714f2af0bbba784d5dd5
Size

29KB
MD5

554206746287714f2af0bbba784d5dd5
SHA1

3d29ba9acc0a9f2adfde59aeca073c95945a9d6d
SHA256

a6802aa4a0776ec5b42a34038c26edaaf90160d8f4fabecfce5262357aa06dee
SHA512

6ca8d23e9da1328cc2683330355def76906eddeda4629039261367b5344e1bd3f247c60aa817ded4ffa06eb6ef1c89e11a8da1c98cd49fabe309ee0396e51291
SSDEEP

768:AzCzDHjqcg3fwgpYK/k59zck/fDBmaXjW+DsKD6lp1:fM3fiXjWqszlp1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
554206746287714f2af0bbba784d5dd5

Files

554206746287714f2af0bbba784d5dd5
.exe windows:5 windows x86 arch:x86

2e78d2633923e668c6d4cf1636ec5a26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
DispatchMessageA
GetMessageA
CreateWindowExA
ShowWindow
UpdateWindow
RegisterClassExA
DefWindowProcA
SendMessageA
LoadIconA
LoadCursorA
FillRect
GetDC
GetWindowRect
SetWindowPos
PostQuitMessage
PostMessageA

kernel32

GetModuleHandleA
GetCommandLineA
FindFirstFileA
GetCurrentDirectoryA
FindClose
CreateFileMappingA
FindNextFileA
DeleteFileA
CloseHandle
GetLastError

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ