55be8195a2b3994165604e75054ecd8b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55be8195a2b3994165604e75054ecd8b
Size

10KB
MD5

55be8195a2b3994165604e75054ecd8b
SHA1

402832bd4bd641c7939482c32d63421600e1a716
SHA256

d32cb1096e9cb3f412fc23114cb625bc4de46b5f122c7fe0a31d85f0de03427c
SHA512

4f78754ee38313617b3459797df101298602d98260d421ee8a07e3ca78bbf7cf7eb198a2cdd4233abefa517363e0e398f05d705d8ada7000b1dbeb080561f4cf
SSDEEP

192:t4VaghfMkTUW6V6Bxwr5Bzj6+1Oi+T3Vc8opsWmBn6cCqv3qxkw6:tyhfMkTN6Jfh1xwVc8oD84kw6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55be8195a2b3994165604e75054ecd8b

Files

55be8195a2b3994165604e75054ecd8b
.exe windows:4 windows x86 arch:x86

19164465cfa1f9f10537fc318a9cd54b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter
Sleep

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_iob
_onexit
_setmode
abort
atexit
atoi
exit
fflush
fgets
fprintf
fputs
free
fwrite
malloc
memset
printf
puts
setbuf
signal
sprintf
strerror
strstr

ws2_32

WSAGetLastError
WSAStartup
closesocket
connect
gethostbyname
htons
inet_addr
inet_ntoa
recv
send
socket

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 208B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE