55caee59246e6947447e761390e06e43 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55caee59246e6947447e761390e06e43
Size

494KB
MD5

55caee59246e6947447e761390e06e43
SHA1

4a91fea6bef9c9bbfcc108ec85f6b5a010bd8033
SHA256

14de8624d19580a1a9fc42c1ad3d0b91e75ab18d3a49f9999edc92dfcf26a67a
SHA512

6ec450201a65eeae0690f4d9205cc176868f7b3a72e4cc084a1e87abdba5193da6226fba1a28bc27be3a097a2d7dc3163c217f02e40700da055fe60a07e30906
SSDEEP

3072:+d8eu3PFf2YLOj745L4mqzz2v+lgadwkiAr/kPheI5N9fCmL:VvdfwkZ4Pzz2v+lxFahdh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55caee59246e6947447e761390e06e43

Files

55caee59246e6947447e761390e06e43
.dll windows:4 windows x86 arch:x86

cf29557ec80b19784620c16da0e71004

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shell32

Shell_NotifyIconA
SHFileOperationA

user32

CreateMenu
DefMDIChildProcA
DestroyCursor
GetMenu
GetWindowDC
DestroyIcon

msvcrt

memcpy
wcscspn
wcsncmp
atol
mbstowcs
rand
calloc

kernel32

LoadLibraryA
LoadLibraryExA
ExitProcess
VirtualAllocEx
ReadFile
RaiseException
LockResource
GetLastError
VirtualAlloc

Exports

Exports

TZsV6CW54wHg

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.itdata
Size: 453KB - Virtual size: 452KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 699B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tidata
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ