56de2c40107b742b2f9832fdcab396d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56de2c40107b742b2f9832fdcab396d2
Size

257KB
MD5

56de2c40107b742b2f9832fdcab396d2
SHA1

010c347a4f13df7629cc7523621a6fdb6f14bf3e
SHA256

c64a0865b990c0f0dac55a122c1e00fb945151d0b1c9f7f7e7372454a612b598
SHA512

1bb891968e026c2172e6887cdcec55afab1b52d84fe4682832bc03f3941386ec7f83e1e9930ff105c187ee8dfd9b50ad015ec1a6e14d1a26f1a19b9fbeaf83a4
SSDEEP

6144:i5hzq84TQUBLsVlqWapoFLwZOkG/Q2pCHKbsgMaEaeyi:8afBGNLIOvbCHKH9Ej

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56de2c40107b742b2f9832fdcab396d2

Files

56de2c40107b742b2f9832fdcab396d2
.exe windows:4 windows x86 arch:x86

6e44293cf257a523cdc418efed231160

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

SetForegroundWindow
IsIconic
SetRect
ShowWindow
EnumWindowStationsA
GetWindowRect
GetLastActivePopup
GetClientRect

kernel32

GetModuleHandleA
GetProcessHeap
ExitProcess
FreeLibrary
GetStdHandle
GetSystemDefaultLangID
ExitProcess
GetModuleFileNameA
CloseHandle
CompareStringA
GetSystemDirectoryA
GetLastError
GetWindowsDirectoryA
WaitForSingleObject
LoadLibraryA

dciman32

DCIBeginAccess

Sections

.text
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.strings
Size: 5KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ