55e44623d315f01eb68cebbf0c51bbe0

Sharing

Copy URL Twitter E-mail

General

Target

55e44623d315f01eb68cebbf0c51bbe0
Size

568KB
MD5

55e44623d315f01eb68cebbf0c51bbe0
SHA1

1664c8ac9aabd7017be0c9f81b426dba215c8996
SHA256

62c5a42bc9750b45ef947d36ff5bef81812f9fb74f62221f1b3320caea852bb6
SHA512

d908ed66336176cee307f6a997f884987a6d30ec7cf2089f52ea55ee7a3c73e9f8bd3154607d3941e77fdb50b2b821f3bb160397d03a93e8bbac5e56de19f2b3
SSDEEP

12288:gk9MvI7Hqz7swrcZ0l5aDOeLyuUaqnVhshEM6f4BS3oC:QvGA+OYTqDsOZf48p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55e44623d315f01eb68cebbf0c51bbe0

Files

55e44623d315f01eb68cebbf0c51bbe0
.exe windows:4 windows x86 arch:x86

3371366a05618b15505c5687ca215c2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
Sleep
FindResourceW
HeapCreate
InterlockedExchange
CloseHandle
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
InterlockedCompareExchange
GetCommandLineA
HeapSize
GetCurrentDirectoryA
LockResource
GetCurrentProcessId
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
GlobalFree
lstrlenA
LCMapStringW
LeaveCriticalSection
ExitProcess
TlsSetValue
GetFileType
CreateEventA
GetTimeZoneInformation
CompareStringA
CompareStringW
GetProcessHeap
GetProcAddress
SetEvent
CreateDirectoryA
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
GetTickCount
QueryPerformanceCounter
GetOEMCP
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
InterlockedIncrement
GetCurrentThreadId
GetLocaleInfoA
SetEndOfFile
GlobalAlloc
MulDiv
SetUnhandledExceptionFilter
CreateThread
GetModuleHandleA
MultiByteToWideChar
UnhandledExceptionFilter
GetModuleFileNameA
HeapAlloc
FormatMessageA
TlsGetValue
FindClose
LoadResource
FreeLibrary
GetStringTypeW
GetSystemTimeAsFileTime
WriteFile
GetStringTypeA
WideCharToMultiByte
FreeEnvironmentStringsW
CreateFileA
LocalAlloc
GetConsoleMode
DeleteCriticalSection
FreeEnvironmentStringsA
WaitForSingleObject
GetStdHandle

user32

SetWindowPos
EndPaint
ReleaseDC
SendMessageA
DestroyWindow
GetMessageA
ShowWindow
EnableWindow
IsIconic
DispatchMessageA
BeginPaint
SetWindowLongA
ScreenToClient
LoadIconA
SetForegroundWindow
EndDialog
SetDlgItemTextA
PostQuitMessage
EnableMenuItem

msvcrt

_strcmpi
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

Sections

.text
Size: 508KB - Virtual size: 505KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3371366a05618b15505c5687ca215c2b

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

Sections

.text Size: 508KB - Virtual size: 505KB

.rdata Size: 40KB - Virtual size: 37KB

.data Size: 12KB - Virtual size: 12KB

.rsrc Size: 4KB - Virtual size: 712B

.text
Size: 508KB - Virtual size: 505KB

.rdata
Size: 40KB - Virtual size: 37KB

.data
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 712B