55c6a97599573461b6fe96ebaacea697 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55c6a97599573461b6fe96ebaacea697
Size

897KB
MD5

55c6a97599573461b6fe96ebaacea697
SHA1

b89eec83e590ce5536e03b3351575cba3f456766
SHA256

e56ea01846ef756e54acd9d47eb2f0e378d9b454c5720e1f2e75bef69174ff11
SHA512

5dcfeb8e1a8526ee64e881df5176a9556bc7d66b85c4bce578adcd3fa3047c0f77062a94e133298cdeae68f3454659245e3491304d54f9f9b70cc0c56360b91f
SSDEEP

24576:iQ9o+chgFZqhOBnVyK23C6OoYMLiVcKtVx4MiuzOCP/Vw:iQBFOOLWSor2VcKbxaWPNw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55c6a97599573461b6fe96ebaacea697

Files

55c6a97599573461b6fe96ebaacea697
.exe windows:4 windows x86 arch:x86

d221b1dc8c3a08622f6512e7876527c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateDirectoryA
lstrcpyA
CreateFileA
GetFileAttributesA
lstrlenA
GetTempPathA
lstrcmpA
lstrcatA
ExitProcess
DeleteFileA
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetFileSize
GetLastError
CreateMutexA
GetModuleFileNameA
VirtualAlloc
VirtualFree
GetStartupInfoA

user32

MessageBoxA
wsprintfA

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gentee
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ