055190878451444c69b65f40fd43b53f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

055190878451444c69b65f40fd43b53f
Size

97KB
MD5

055190878451444c69b65f40fd43b53f
SHA1

acae43cfa830aa1a6043e87323751e46b5acda97
SHA256

a27dec508619309f64149b9fb277d93ea1955e1bfdd33dfe415d0ab0d9cc26c7
SHA512

afe3d50796a1647a0f0dd078ba1a7105c0e9520bb598ca00b7008a9744ece95443b7a2e1e40b67fde9fb4af172d6931fffbd59d9318886013a7eea37bcde05db
SSDEEP

3072:dBlkcJk4omalJtLAos+acgUE2plCIU+Xc1mtN6bM:dnkc9oDllAWEElCx+Xc1A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
055190878451444c69b65f40fd43b53f

Files

055190878451444c69b65f40fd43b53f
.exe windows:4 windows x86 arch:x86

689d069f5612173daa8ca37f9f7ece83

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessPriorityBoost
HeapValidate
AllocateUserPhysicalPages
SetConsolePalette
LCMapStringA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE