155eaa8a455322c75b09a1225ca3c723 | Triage

Sharing

General

Target

155eaa8a455322c75b09a1225ca3c723
Size

131KB
MD5

155eaa8a455322c75b09a1225ca3c723
SHA1

61acf87e4f152ecb4f34c4dbf343438c20348728
SHA256

7862212ba361923d07f28d1167af332836920f42af0ae8f559020f55e1ebb20d
SHA512

2244c74bf4acfe88489e9b2810913bb730d2e302ed09af71aa422c0e529a0f439cfeafc1671c680d3abc8cceae242a4eb2c29e3902a97437b085df17f8e8472e
SSDEEP

3072:PNLGZgCjmFhc4JCU45NQijBrSgBeDIHacZRrxV:PydmFnoU45NQ3gMsHnrx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
155eaa8a455322c75b09a1225ca3c723

Files

155eaa8a455322c75b09a1225ca3c723
.exe windows:4 windows x86 arch:x86

86775efb15bb10d86499397f50b1966d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CloseHandle
GetLastError
GetThreadLocale
GetProcAddress
VirtualAlloc
LoadLibraryA

user32

GetMessageA
DispatchMessageA
TranslateMessage

oleaut32

VarRound

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ