55c88d2dd2e2a929708fbc659eb84df2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55c88d2dd2e2a929708fbc659eb84df2
Size

73KB
MD5

55c88d2dd2e2a929708fbc659eb84df2
SHA1

85e2dd0640bc403cb7e4abf731ead74613bcd28d
SHA256

54023c4052265d6b1f8b0089dc4cd5b586eb488dd9630f0d77bc184a219cd78f
SHA512

9c5bd2b50b6bd2d7706fb1caf9a4a2e2f90b2fdd849bbead94d84d9ae164f33af640e38334f7eb5f753c4bae647a213a783e6ea1fc1ae13eba0d70e41e3ccd92
SSDEEP

1536:coomK+GWdOd/HhOBzhlV3sd6kvAe9+c2FXM:YmlNdU/BOP2EK+BO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55c88d2dd2e2a929708fbc659eb84df2

Files

55c88d2dd2e2a929708fbc659eb84df2
.dll windows:4 windows x86 arch:x86

61597ffc3eb9f12ccff061cc20a15ea9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCommandLineA
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessId
GetVersion
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
VirtualProtect

Sections

.text
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 61KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ