55a3b793e1f17450448af6b1f4fc559f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55a3b793e1f17450448af6b1f4fc559f
Size

133KB
MD5

55a3b793e1f17450448af6b1f4fc559f
SHA1

77931f7d7ae06354ea96e45a551586d6b232c665
SHA256

9f2ace36c9ab4245fed79fd1035cd85c25dad4eed953382135405f8593f178fe
SHA512

a41e4fb39f9fbb7e420bcb21db63a7ec0e3663a175016c5f000eb44cd6d809b0ec7f5d348a7d1a543c42750ef0d1ddc33f4eb8a6895bd8136489730513beea0a
SSDEEP

3072:qnpc6QQivfiPiOTGWpVBDKy+xLG2KbwA0L+efw696LN:qpc6eHobTTBDKPK/efwm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55a3b793e1f17450448af6b1f4fc559f

Files

55a3b793e1f17450448af6b1f4fc559f
.exe windows:5 windows x86 arch:x86

4afd4e5f01c07b2143f83d6f6603a401

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrCmpLogicalW
PathCompactPathExA
StrCmpNIA

kernel32

GetSystemDirectoryA
lstrlenW
GetModuleHandleW

Exports

Exports

?CoolerOptions@[SXH_KK]V
?GetImpersunt@[SXH_KK]V

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xsys
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ