55d629eb4a75e27e2834fe6ee1e54ad2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55d629eb4a75e27e2834fe6ee1e54ad2
Size

100KB
MD5

55d629eb4a75e27e2834fe6ee1e54ad2
SHA1

79e06b5d99555cb032706512e7b9cadd29644aba
SHA256

16fbc89e2768dff3d12874555ecfa375164d6b822b17c3a9db2cae03fd702f19
SHA512

f11f6d93b7a06883af69c7e8ecd8b3a2e39bdf6302272c0da824f3f3328b205828041427485cbe05ce8a091725b39bbda9d1adbe2d3cfa65364803cec775c958
SSDEEP

1536:9G5sRzyzU8Xa6QFkBdTV9HZxJxDV53foo1ojR+1auFAU6LaWYuk:45Kzy5QiB9Ph5vomoo1GaWY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55d629eb4a75e27e2834fe6ee1e54ad2

Files

55d629eb4a75e27e2834fe6ee1e54ad2
.dll windows:4 windows x86 arch:x86

c4cdf96e902e34c126f1ff15edeecdad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SignalObjectAndWait
RtlFillMemory
FreeUserPhysicalPages
RegisterWaitForSingleObject
SizeofResource
VerifyVersionInfoA
AddConsoleAliasA
FillConsoleOutputCharacterA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

text
Size: 8KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ