55ab44b658375fde1e9f420562b6051b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55ab44b658375fde1e9f420562b6051b
Size

132KB
MD5

55ab44b658375fde1e9f420562b6051b
SHA1

6ef0a41f7449553b3247af0000ba1d17943e4990
SHA256

7ec94420a3fd01a5ca4bb372b2cc58fe66b2343e7325def2416eff64a2e056cc
SHA512

4cd52da1b75c3ae5fc12ab3ead0b58e2388c52016226f0fb7e400f6fa6ec16f1a347ca4f82ba3b44321a5fbaef1b37424fa78980395c0c7409026f6d16875d81
SSDEEP

3072:2xWZXfTIbb1W30n2+CIk8G7fgCNpU1oOOged4EXwgNER:Rs1V2H7fXpU+Oa4uZE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55ab44b658375fde1e9f420562b6051b

Files

55ab44b658375fde1e9f420562b6051b
.exe windows:4 windows x86 arch:x86

5549d8829f3cbfabc7c2f004e53289f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

comdlg32

ChooseColorA
dwLBSubclass
PrintDlgExA
FindTextW
ReplaceTextW

Sections

.text
Size: 89KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE