55a820992ee1b0360d25a02a76395058 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55a820992ee1b0360d25a02a76395058
Size

37KB
MD5

55a820992ee1b0360d25a02a76395058
SHA1

288bb5e577723086c9dc4dad33ab521ee16a9a59
SHA256

54b8a106246173a8e040cba4d66f3243fe889810f8d3c75ef3221a951800929e
SHA512

af2920bff6ea5936a0205bce350d3ffc366ebf70ed8e5223543d42256367582cf979d19febf601653a5544d01d289e9a141ff9b9e13d3bac1ad716b01e63fd0c
SSDEEP

768:jpuxbbb93pfzxWt7QYQ8IgDidhHPjAJYvHF0lwY437avXKrnrl:j0Rbb5WRQYt9ir/2wraC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55a820992ee1b0360d25a02a76395058

Files

55a820992ee1b0360d25a02a76395058
.exe windows:4 windows x86 arch:x86

879072da78b6146d76f51c669b56a5f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetTickCount
GetProcAddress
LoadLibraryA
HeapFree
HeapAlloc
GetProcessHeap
VirtualProtect

user32

ShowWindowAsync
GetLastActivePopup
RegisterClassA
GetParent

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE