56fc642cc13b779ea4c449688a0f6d86 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56fc642cc13b779ea4c449688a0f6d86
Size

40KB
MD5

56fc642cc13b779ea4c449688a0f6d86
SHA1

bd3910b081bc063cdaaa5363813ad47a7dc74f59
SHA256

e71d112bd0f896059f681d2c0edd9bc9d87843388ce0ca8f81c04f28e50e76e7
SHA512

f86b395c577cf56824bb28a33a67aad72512d0dfd9e42eae4338a5c79a0717b34a5f905eff14677153da25e207d3d0ddb5d9a8581ef52dbf741fbfcc4cdcfce0
SSDEEP

384:G10C9PoNmCPFv9u+RGnzoEpoDb7DMM0OZfr01jAKY:tCqNPu+RglSDFzZfr0VAKY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56fc642cc13b779ea4c449688a0f6d86

Files

56fc642cc13b779ea4c449688a0f6d86
.exe windows:4 windows x86 arch:x86

fb6e91f05c0262b542b5ce8fd4082dc8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_setmode
signal
sin

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 160B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 60B - Virtual size: 60B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 352B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ