055ddf4e756a960cccc67abd26fe110c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

055ddf4e756a960cccc67abd26fe110c
Size

176KB
MD5

055ddf4e756a960cccc67abd26fe110c
SHA1

29655c5c13712e48829e7684ee2224b7c12dca0e
SHA256

6bee0931c5789a46120574049539f8f97747eed4c45e625726ebdced03e9be4a
SHA512

9f593ae892e8309e2a5a4abf9143524f48312a06ba2cb71f03257ae57307fefb776738d360953cc0984ba7eb40c0065551d7056f8870ce13be3af1ab77c72287
SSDEEP

3072:A44Mf4LWCSGTzblGhjTdK57hTRAv+2ZYeOTmz2UWtqOJa9QPKh6bCnxc40tYS2Uq:ZAgGJG/K57hTRC+A4mz2ttqmvbCaNYSv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
055ddf4e756a960cccc67abd26fe110c

Files

055ddf4e756a960cccc67abd26fe110c
.exe windows:4 windows x86 arch:x86

8f04f810497cc3ea6782a8ca472c0a38

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GlobalUnlock
LoadLibraryExA
WaitForSingleObject
CloseHandle
GetTickCount
lstrlenA
VirtualProtect
GetSystemDefaultLangID
GetVersion
SuspendThread
HeapReAlloc
CompareFileTime
LocalSize
GetStdHandle
GetConsoleCP
GetAtomNameA
GetModuleHandleA
InterlockedExchange
HeapCreate
WaitForMultipleObjects

gdi32

GetTextColor
GetFontData
DeleteObject
GetMetaRgn
DeleteDC
EngLineTo
CreatePalette
EqualRgn
Ellipse
BeginPath
EndPath
GetRgnBox
Escape
CreateICA
CreateFontA
FloodFill
AbortPath
GetMetaFileA
GetStringBitmapA

winmm

auxGetVolume
OpenDriver
CloseDriver
PlaySoundA
auxSetVolume

secur32

AddCredentialsA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 784KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ