56bd0cf013e75ca5adbfb554d8482b3f | Triage

Sharing

General

Target

56bd0cf013e75ca5adbfb554d8482b3f
Size

33KB
MD5

56bd0cf013e75ca5adbfb554d8482b3f
SHA1

3263dca3f13409a5d3f81c220adb90006076053e
SHA256

6f222f1c3a45869457d9c36fbc6e00759687060d15ddc8e76df803a317647830
SHA512

fa075c0ab1ff18d67ea9ea582ac2f89059a92f09f46083bc78aa7e34001f4ac8f0fe1f515f4f485d8a0b75eafc7d69e72b5840ddcec4797505258ee665b06ac5
SSDEEP

768:HmTT4JbCrC9AZ9z87MzVQNBVhUahYRzW6W+iQX:HmTMJbCrWAR+7VSah4XX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56bd0cf013e75ca5adbfb554d8482b3f

Files

56bd0cf013e75ca5adbfb554d8482b3f
.exe windows:1 windows x86 arch:x86

68675c8b50c5ad2ebdcafc2660a2c3cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeA
IsBadCodePtr
GetCurrentThread
LocalHandle

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 28KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE