556439d71d7ec2f8a6250d13834ba899 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

556439d71d7ec2f8a6250d13834ba899
Size

322KB
MD5

556439d71d7ec2f8a6250d13834ba899
SHA1

5ca9845b67be9a987dd50837d1954523d8988fe1
SHA256

d5ccddab34f611ff8952d597f76fd7b2994920abaa72cf4c80753d66f3546312
SHA512

22f6d11a4ccfde9e9116ed42c9aed9c21d952964f4c4fa6b4c0f605c412b59b6cf82fe0e72047463b0bfce0d283b19127e8775ef40da87ddf24967a62f8746b5
SSDEEP

6144:hP2GzqJUsdlttakMA3z/g/J/HUiYjv1hw8NrcdMLZSzvyY2q06aBwPKb1eF:hP2Tqsd9akzz/g/J/0ikhwCZVY2q0/wq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
556439d71d7ec2f8a6250d13834ba899

Files

556439d71d7ec2f8a6250d13834ba899
.exe windows:4 windows x86 arch:x86

9120f00885af0922bcd574c57d605d99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetProcAddress
Sleep
GetModuleHandleA
GetPriorityClass
LocalLock
VirtualAlloc
FindFirstFileA
VirtualFree
GetExitCodeThread
ExitProcess
DeleteTimerQueue
HeapLock
IsBadCodePtr
CloseHandle

user32

UpdateWindow
IsIconic

shell32

DuplicateIcon

netapi32

NetDfsAdd

msvfw32

ICCompressorFree
DrawDibClose

Sections

.text
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 206KB - Virtual size: 541KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE