55bd3570e724655b040ccbf68404f071 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55bd3570e724655b040ccbf68404f071
Size

109KB
MD5

55bd3570e724655b040ccbf68404f071
SHA1

9973ce736830179d9e2795b5b9b6db01968bd249
SHA256

1e49d966167eb742894c8507ee7ad25c9a605acd711fc8b5d20673e721ba1f1b
SHA512

7cc09810188bcd3d8c323567ac1a18c923fb183ad570d5ef09ac82e969c5aee84a3e833eace9d5baf6dbc13c762b0eb025fd26b91bf44e097b962b792fd14cf3
SSDEEP

3072:jKL3pZFDBza3W9ysns1uSozpap5A774X:jO3pZlooW7A774X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55bd3570e724655b040ccbf68404f071

Files

55bd3570e724655b040ccbf68404f071
.exe windows:4 windows x86 arch:x86

d46237411e91e01849c004b710ac3b7d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapWalk
DeleteVolumeMountPointA
Process32First
FindNextChangeNotification
_lcreat
TermsrvAppInstallMode
DosPathToSessionPathA
GetConsoleCommandHistoryA
RegisterWaitForInputIdle
GlobalWire

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 85KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE