55dbf133168ae68f8e5ce1e98fdbcd7b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55dbf133168ae68f8e5ce1e98fdbcd7b
Size

696KB
MD5

55dbf133168ae68f8e5ce1e98fdbcd7b
SHA1

bd3d1438d0c1a3ea618accd10dd7a7fd2ab1b13a
SHA256

8bff46599591c1425f145e3a6869eb7945988c5edaf166892cb31fd032ad3ad4
SHA512

f878618a7c3ff0da249372027c8a9c70f1e39d5fd69942fb77959da763182d87f036745571a55999ceee1fb52cab3721dee80e36e3dd227581587e046cf00602
SSDEEP

12288:GcUk9EIdjJ28OssuZWj1W1v2xehk0Xrj1kRiWuoe6p2d/NegBKs:Gc9Ldl28OssuZkW1v2xwk0bZkEWJrGe+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55dbf133168ae68f8e5ce1e98fdbcd7b

Files

55dbf133168ae68f8e5ce1e98fdbcd7b
.exe windows:4 windows x86 arch:x86

f75168d64597984c5fdae1cdd5162476

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetFileSize
LocalAlloc
GetCommandLineA
LocalFree
GetModuleHandleA
GetStartupInfoA
Sleep
lstrlenA
lstrcpyA
CreateEventA
GetTickCount

msvcrt

_exit
exit
wcstoul
memmove
_c_exit
__p__commode
_XcptFilter
__CxxFrameHandler

gdi32

GetObjectA
MoveToEx
GetTextColor
GetStockObject
GetTextExtentPoint32A
CreateFontIndirectA
BitBlt
ExtTextOutA
GetBkColor
DeleteObject
GetPixel
SetBkMode
SelectObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 673KB - Virtual size: 676KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ