055ec87f59a5a4a30a3356f8c52ddab7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

055ec87f59a5a4a30a3356f8c52ddab7
Size

178KB
MD5

055ec87f59a5a4a30a3356f8c52ddab7
SHA1

f5229a0e1dcc074aa10553dbaef366a9739efbe5
SHA256

913b90b3680e8634a090313b93ca4f2bf6a2d40d22796a67c2fc95e4a13b051b
SHA512

07e156223d0769d61f2ad93e0e052b692648e3f02ebc19ecfbcb4c5a0ec4405372a8b852967d3329bca1de1e86b1a1a4df1f5639650d2d540bf764e511de036c
SSDEEP

3072:GSFWzQCY/nIIBClIuqGkJ629YDzEq6UeLkimE5hNKLIkewprqZbE3+bJaBPpRspR:GSkcXCl/l2+WUeLkimWkIkew8bEKJkhQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
055ec87f59a5a4a30a3356f8c52ddab7

Files

055ec87f59a5a4a30a3356f8c52ddab7
.exe windows:4 windows x86 arch:x86

c55d58516ab8b94df1945dd02ca3b318

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 169KB - Virtual size: 508KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE