00b055896c1b802c7abcccc1943e6eeb | Triage

Sharing

General

Target

00b055896c1b802c7abcccc1943e6eeb
Size

20.0MB
MD5

00b055896c1b802c7abcccc1943e6eeb
SHA1

ed34da1c176016659b0d850a58608c52d7b67ddf
SHA256

15b419fb5e65e9af292edd0a28573ba3b80397d5cbba50b7d3e336d9dcdd51fd
SHA512

5c5d3eda6f02562de5844b4d4077407425a5ff9e284aeb92dd188d688c927bc179611e12f364d31c8468c4f0f1684feba60989bd4c4d697ecea1081b46736de8
SSDEEP

393216:simdhqnnXKWKobG/XHA4bw87GAsx7Y07NeDohVn9fJiHrlJ7mqQsv:simdhqnrjy3/bw87G97goB8HrlMq1v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00b055896c1b802c7abcccc1943e6eeb

Files

00b055896c1b802c7abcccc1943e6eeb
.exe windows:4 windows x86 arch:x86

dfd2b29d097c02db001416b7fe4e82f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
FindResourceA
GetProcAddress
GetThreadContext
Sleep
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
HeapReAlloc
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetLastError
ReadFile
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetStringTypeA
GetStringTypeW
SetFilePointer
CloseHandle

user32

SetTimer
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
MessageBoxA

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ