55809f7e9bd0508b1d6dbf23fcc236a7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55809f7e9bd0508b1d6dbf23fcc236a7
Size

373KB
MD5

55809f7e9bd0508b1d6dbf23fcc236a7
SHA1

be5cc2fd8747ec3c37be4d3c8e32c8131a4044c2
SHA256

ca83c4ffaed3a1357af4a847befdd83f6d1d33840392468a5da0a52de041a44e
SHA512

7feb6166dccf0ce901b54ca741b7e78c6cf31147a61533eb1dc578badbed9873a6f3f43c71b4bbffc9a7dc60976b667ad951805889f8fc44b7f7e0461e88fcf1
SSDEEP

6144:wwjfmaLOanuzdE90TzXexCRqS2O7DYXD/LSljAf9t7sy/r8n1wyR+MqrR/tGQ3nE:Hfmayvm9SOxCMSNaLw8798nyFltbnmR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55809f7e9bd0508b1d6dbf23fcc236a7

Files

55809f7e9bd0508b1d6dbf23fcc236a7
.exe windows:4 windows x86 arch:x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 362KB - Virtual size: 816KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE