53ee96bf7f667958cb1f3be9ddee3bbc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53ee96bf7f667958cb1f3be9ddee3bbc
Size

35KB
MD5

53ee96bf7f667958cb1f3be9ddee3bbc
SHA1

cd255a08475fdba6122211f28b47a6ef0066ad44
SHA256

cd0b1f58d26139f1335287699fa7aaae7211724c927935ef393f4ec2150e6461
SHA512

e72790dd60408120491c8fa9d9190410848e5cc7e5cc6fbd2698409aeeb56c02f3964795880e059781e5be1e1fe2ef72d76a66565f5faf1e6341c41824fe60c3
SSDEEP

768:byeVPVtgxsVu6QX7Nfx07dxwbQtzUngenRB9LeZ:bPV9tgxsk7UxxwbQtzf89Ly

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53ee96bf7f667958cb1f3be9ddee3bbc

Files

53ee96bf7f667958cb1f3be9ddee3bbc
.exe windows:4 windows x86 arch:x86

4266b0d41d09f47e734e17daece3350c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLangID
WaitForSingleObject
QueueUserAPC
DeleteTimerQueueTimer
CreateMailslotA
GetCurrentConsoleFont
GetACP
GetDiskFreeSpaceA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

itext
Size: 4KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

idata
Size: 27KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ