0566a52631ff2d75be34fe57a944f2f1 | Triage

Sharing

General

Target

0566a52631ff2d75be34fe57a944f2f1
Size

476KB
MD5

0566a52631ff2d75be34fe57a944f2f1
SHA1

faa0143397444a2fa41ecb87f9ed860e309d4786
SHA256

e345253d13844b0afaad3a6fcba60e12b68d93cc3a367f8cc1673f02dc71ee1d
SHA512

22f4ad7611f38e7069645591867da05389e62dd4a68797d312cfeaafebfc23675f3f0aefee74006322b06549ce0662a0e8ed4e2813e554fa8b03e55fa09acdd8
SSDEEP

12288:bhazIumdlRyzUb5nSUaueBvaCkVSdY1BXoctg:nlRyQSUaLBCCkVSYBBg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0566a52631ff2d75be34fe57a944f2f1

Files

0566a52631ff2d75be34fe57a944f2f1
.exe windows:4 windows x86 arch:x86

869fac6e264765ad6c4e928cdf06e278

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipAlloc
GdipCreateBitmapFromFile

kernel32

FindResourceExW
FindResourceW
LCMapStringA
LoadResource
LocalFree
GetVersionExA
FindAtomA
lstrlenA
HeapAlloc
HeapFree
GetTickCount
GetProcessHeap
GetLastError
IsProcessInJob
ExitProcess

gdi32

GetFontData
DeleteObject

user32

GetKeyState
KillTimer
SendMessageA
SetTimer
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
PostMessageA

Sections

.text
Size: 316KB - Virtual size: 316KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 595KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ