56b06a5ed99ce4bc3cfb7df120227181 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56b06a5ed99ce4bc3cfb7df120227181
Size

480KB
MD5

56b06a5ed99ce4bc3cfb7df120227181
SHA1

762aa31e57d9c97a303ce8a358cb84dfb2b59cd7
SHA256

35cc815e6b9414162948e1b79f556113e49d33c263fc19d9f9b3d507cfb4ea46
SHA512

2e0e617f8cc12e46fd2116ade360e636a61594965078aa99a52bca583bdfe25ca78cbd43674ff0c225fb7d33a1ca4dc2424239189b421c024b5d1d3f50e8aced
SSDEEP

12288:91ywMZD+j4IDBTrOgG1mqLVVDty3PtkeIQnsmsa:PywEa4IxrzG1fVltMuBa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56b06a5ed99ce4bc3cfb7df120227181

Files

56b06a5ed99ce4bc3cfb7df120227181
.exe windows:4 windows x86 arch:x86

6354d5cf0ee666f54efd3efd4ba117df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SheChangeDirExW

advapi32

GetAccessPermissionsForObjectA

kernel32

CommConfigDialogW
GetCurrentProcess
GetCurrentProcessId

user32

GetFocus

Sections

.text
Size: 476KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE