056e266801413f8e309dffc2353b5b1e | Triage

Sharing

General

Target

056e266801413f8e309dffc2353b5b1e
Size

67KB
MD5

056e266801413f8e309dffc2353b5b1e
SHA1

977ea4711f739c6378b5320edcb4980e52df671d
SHA256

31de0315a421266bd23bab3fd6b4f617b2a6a894fb2bbe7ab0b88026c6014719
SHA512

dee345e35381fa3e78b1be8ed39b7c1ced7fd7cdeac285e0d5f4fd44ede5be1bc5c7d141fb7c0801f28101e41242dec3d7e8d45532291a9bccd22856b62e3eb2
SSDEEP

1536:5K/wT0Ra25d6PAxoU5rHf+84W0nAjpqB508nokc:57Ya22yoU9jpal9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
056e266801413f8e309dffc2353b5b1e

Files

056e266801413f8e309dffc2353b5b1e
.exe windows:4 windows x86 arch:x86

f0486b8511dc29a3ab088f55d495c962

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
GetCPInfo

user32

DialogBoxParamA
InsertMenuA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 70B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 195B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ