556e22d39bf821bd92f0ece4ba41e3f2 | Triage

Sharing

General

Target

556e22d39bf821bd92f0ece4ba41e3f2
Size

94KB
MD5

556e22d39bf821bd92f0ece4ba41e3f2
SHA1

08d1578dcb1b77de66e62cabe3ca99725ee88920
SHA256

adb740117a07d1d924dbb9303af6c6b7c04595244c97160b6cfad98ae9646688
SHA512

bca9fed74284a1c1ee61a782453896e62f4b2103693619171c03b9abdd76b0cdba6f28277f1e74dc84fcc711e9c1051f3e19a652e3f192478b734c2e759c2b79
SSDEEP

1536:xu9L0EhDxnY9mc+N6ekR81R7w/VN0R2c8YaEJwZK4/83ZoMOALF6SSf:gJDxnY9mcLjwR7wfFhZEXtpxLF6H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
556e22d39bf821bd92f0ece4ba41e3f2

Files

556e22d39bf821bd92f0ece4ba41e3f2
.exe windows:4 windows x86 arch:x86

dd30ed8192cbef41535431077c8fd5a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Module32NextW
ReadFileEx
UnregisterWait
GetStringTypeExA
TrimVirtualBuffer
DisableThreadLibraryCalls
BaseCleanupAppcompatCacheSupport
TlsAlloc
FindVolumeMountPointClose
Beep
SetTapeParameters

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE