556b475772360de2bd2448f9ba243e8f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

556b475772360de2bd2448f9ba243e8f
Size

31KB
MD5

556b475772360de2bd2448f9ba243e8f
SHA1

86703906c0bcc4ec2e8cc13a0200c39f7a3b487d
SHA256

d47ae953af9822ce56143712ea8717477ba05e921c78b5d4423c473473d1cbae
SHA512

9cb90bf0d9da8213e41917b7c64fd97117435afc88bc821d465e1900a64b08973be465ae646b894dc7dd7e614df6c14423b9d1d6e54737065bf474fbba19d8ea
SSDEEP

768:+JcdbTvD0dsayXUkLmhXUPwUekDyj/eyadOsG/SPcv+9Vx1K:lfvD12ccaQ4Pcv+9Vxk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
556b475772360de2bd2448f9ba243e8f

Files

556b475772360de2bd2448f9ba243e8f
.exe windows:4 windows x86 arch:x86

fa5f6989f3e7b3e51cb07c8a78028f24

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
GetTickCount
QueryPerformanceCounter
HeapCreate
HeapAlloc
GetProcessHeap
Sleep
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
VirtualAlloc
VirtualProtect
VirtualFree
GetProcAddress
LoadLibraryA
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 710B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE