55307e224a164078b0ef3157115fa377 | Triage

Sharing

General

Target

55307e224a164078b0ef3157115fa377
Size

159KB
MD5

55307e224a164078b0ef3157115fa377
SHA1

c2bfad2255df4638129d7e03050607bcb45267a1
SHA256

86343bb066f0259040c3b2a2b0719dac31b417308fcfdd930064078d2d48288a
SHA512

b74258f22f5177272c39633c4a3009378c786c8ac293fb61b438c2e9cab40894c6d512d07782a4b8d489176a83549e00953699802e42ffedf5f9653b9e4b27db
SSDEEP

3072:wdwvIgG/K7c7sFJRZdGCpsw8gFW4WwJKDJN4XfyBKdY+dTVSD+E26rILxyXjKIEo:wxS7cAXv2DoWxHcMKO+dTVMNOM2VK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55307e224a164078b0ef3157115fa377

Files

55307e224a164078b0ef3157115fa377
.exe windows:4 windows x86 arch:x86

6d54da0ad759fd54c49e6852a7014b80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
CreateFileA
LoadLibraryA
CloseHandle
GetCurrentProcess
ExitProcess

user32

CreateWindowExA
SetWindowLongA
CloseWindow
CharLowerBuffA
wsprintfA

advapi32

RegDeleteKeyA
RegEnumValueA
RegDeleteValueA
RegEnumKeyA
RegOpenKeyA
RegCreateKeyA
RegCloseKey
RegSetValueA
RegQueryValueA

Sections

.text
Size: 134KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ