0553d24e520a90538b61aa42502f1904 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0553d24e520a90538b61aa42502f1904
Size

64KB
MD5

0553d24e520a90538b61aa42502f1904
SHA1

90ce992f8157e717022c842080e9307d8ac8aeee
SHA256

75e8d7d769fa0738023f697b45075eecb39dc9f698334e067a7a5ea26eb108ae
SHA512

fd26b3efc25008be281dd2f87d2e44c1700cdbf8412848fc93f93e5188598195778463766f9a294c1e24ff74a7066d5d6d1ca5567a0a2390f2c1e64704aa5b08
SSDEEP

1536:1UTXdRfpeHhlAeA19/MhsBeGaja69aSRqa5fmAVmMhId:+TXrwGeA1+hQ3UUSUa5f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0553d24e520a90538b61aa42502f1904

Files

0553d24e520a90538b61aa42502f1904
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

a6a2981b62f118e69e748b2171d3146d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
VirtualAlloc
VirtualProtect
VirtualFree

ws2_32

connect

msvcrt

_itoa

user32

GetForegroundWindow

advapi32

RegEnumValueA

shell32

ShellExecuteA

oleaut32

GetErrorInfo

Sections

.dfg
Size: - Virtual size: 236KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dfg
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE