6553a5cf265292eb548e546630d1073a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6553a5cf265292eb548e546630d1073a
Size

338KB
MD5

6553a5cf265292eb548e546630d1073a
SHA1

f606997ce8f4e1fd0d4145f8f22c467d83c8cf21
SHA256

e0891b41855ed178039d27351cc9de9ced1b336030f06790bd68c72e190cea99
SHA512

a0beb21c0123e338a6e86169082fb852c7bee4d916ecb7054b2c0ee99976a25d2908c0f902c7e246c5d98afbd18991cfbe93c72ecda078ffce4829476e1de337
SSDEEP

6144:VQpXP/lFNQ2N5QmMjmGQr5MDmVieQU8rXUxcyN3Y1eq9ec1mcADHM0iYbjE:2p//lFq2DFXdAUiUayB+ecec9KHeQjE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6553a5cf265292eb548e546630d1073a

Files

6553a5cf265292eb548e546630d1073a
.exe windows:4 windows x86 arch:x86

1eee07066e8933dc6c0f7d29b766fd5e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
IsBadStringPtrA
CreateEventA
LocalFree
GetACP
GetSystemTime
GetModuleHandleA
VirtualProtectEx
IsBadReadPtr
GlobalUnlock
FreeConsole
GlobalLock
GetStdHandle
CloseHandle
lstrlenA
FreeEnvironmentStringsA
ResumeThread
OpenMutexA
FindClose
LoadLibraryExA

user32

IsIconic
EndDialog
GetDlgItemTextA
GetMessageA
GetComboBoxInfo
ClipCursor
IsMenu
GetSubMenu
GetMessageA
CheckMenuItem
DialogBoxParamA
SetFocus
CreateWindowExA
MessageBoxA

msasn1

ASN1BEREncOpenType
ASN1BEREncNull
ASN1DecAlloc
ASN1BERDecCheck
ASN1BERDecBool

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ