559529b5d1fc94504fdeaa5e276fe3a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

559529b5d1fc94504fdeaa5e276fe3a5
Size

61KB
MD5

559529b5d1fc94504fdeaa5e276fe3a5
SHA1

d678af35de81192df8ae99fff149924d0e11bede
SHA256

e8e483eb991dbdc28a34c57b390d5cb278d5897effb550b58640964709dc5c82
SHA512

186c31ac93f61001909ab81dc0b5c461451ab14065bd8a88a04e2c03b542bf545e4064da4e1526991804e334d608c175a5b81296236900ffd1e4c484472e4df5
SSDEEP

768:mgB3lOxdpxV1Kj0fkMg0n6BpNnNDt3Ooji5o6keJncciyTNzg:JB1y2qkMg0n6B7NcSPJeJccRJg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
559529b5d1fc94504fdeaa5e276fe3a5

Files

559529b5d1fc94504fdeaa5e276fe3a5
.exe windows:4 windows x86 arch:x86

3364e459565b4b5ac80974a9708a3e7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA
SHGetPathFromIDListA
SHBrowseForFolderA

user32

SetWindowTextA
SetDlgItemTextA
SendMessageA
LoadIconA
GetDlgItemTextA
EndDialog
DialogBoxParamA

kernel32

MapViewOfFile
lstrlenA
UnmapViewOfFile
SuspendThread
Sleep
SetThreadPriority
ResumeThread
ExitThread
CloseHandle
CreateFileA
CreateFileMappingA
ExitProcess
FindResourceA
GetFileSize
GetModuleHandleA
GetTickCount
GlobalAlloc
GlobalFree
LoadResource
LockResource
SizeofResource
OpenFile
CreateThread

winmm

waveOutClose
waveOutGetPosition
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutReset
waveOutRestart
waveOutUnprepareHeader
waveOutWrite

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE