54561d4b50b8207e38586b198c9566ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54561d4b50b8207e38586b198c9566ed
Size

22KB
MD5

54561d4b50b8207e38586b198c9566ed
SHA1

70d190c4b445ecbdc95eaacdff3e64f4e8a048e4
SHA256

0255f9ee549c989aa7e92d32627511eb14ce9d8fb194a74473673ce042666f4b
SHA512

90fa3c5d5e956d772726d92744d475f034afc19648e7921637c25ab7d82d8a571a95110d2f763273e254ad7f5e24df945594cf7aa9eca51b27866c5980709311
SSDEEP

384:MnM0nXQxEaHQ4ASqcOcbXxoU7DTkcxrm4Fd7SwKC5BeYVm:Rxpw4rq8bXzfTkUrmI1g+m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54561d4b50b8207e38586b198c9566ed

Files

54561d4b50b8207e38586b198c9566ed
.exe windows:4 windows x86 arch:x86

744839b78e42c5a8f8eb2dde6822cfed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

select

kernel32

CreateEventW

user32

MessageBoxExW

gdi32

Chord

advapi32

RegCloseKey

shell32

ShellAboutW

Sections

.text
Size: 1024B - Virtual size: 970B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ