54ddd44d99095ddbb7c840055cfb2c6e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54ddd44d99095ddbb7c840055cfb2c6e
Size

287KB
MD5

54ddd44d99095ddbb7c840055cfb2c6e
SHA1

c028f6c5a72d5b965ff23eaaf1b874a73749527f
SHA256

0a18cf2bd0b0d4075199bb30e25f7fc7c572fc766242bd0c5f57fda6b2c5d59e
SHA512

788f18b2231e2e974253fbf9c8b2d8d510f0c131ca3b3516afb823a149ef5523f43d6ed9ab4148f2e1db2b6108d8a9ef9473b8553544ff77753cc8fcfafb4364
SSDEEP

6144:16ViXs08Cxy6hN95YUVDqqxdKd2r6nXbLXgRLOpgEg0afX:4VLCxy6hNxod2rePwRP5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54ddd44d99095ddbb7c840055cfb2c6e

Files

54ddd44d99095ddbb7c840055cfb2c6e
.exe windows:4 windows x86 arch:x86

acd9fa3a74cc4c1d92998e6ad62eeb8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 576KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 279KB - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 320B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ