55dc1e98d3f4b4228799c1cd67ff530d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55dc1e98d3f4b4228799c1cd67ff530d
Size

56KB
MD5

55dc1e98d3f4b4228799c1cd67ff530d
SHA1

7e142c69cff9488c3c67093e098b75850b77b7ac
SHA256

dc6b8668246d1c196e2eefea957749da710b1a1e7b19a54c0220b34a14749a37
SHA512

c404fe2847117d45b6fcdd0f2b6d460e575627a822141178e41259ce4e3604741a0bbd7aef017bbdfff2dcf510c14b432d04c7c5a3061721f7e90362be50675d
SSDEEP

768:awADufdQKo+oVa5R6qC1wh3j6X5BRo/0zs9t2EkYUCJ/G//ZqA2xG7M:afaV75R6nqhGU/0z8fUkG//ZqAy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55dc1e98d3f4b4228799c1cd67ff530d

Files

55dc1e98d3f4b4228799c1cd67ff530d
.exe windows:4 windows x86 arch:x86

37ab09a6edbf9fbf08aa53c4b4e64002

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
lstrcmpiA
VirtualAlloc
VirtualProtect
IsBadReadPtr
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

user32

DefWindowProcA
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
KillTimer
SendMessageA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA

msvcrt

_XcptFilter
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
free
_beginthread
_exit
malloc
exit
_acmdln
__getmainargs

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE