b55d5deb1f649f2b09151e937be86994 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b55d5deb1f649f2b09151e937be86994
Size

4KB
MD5

b55d5deb1f649f2b09151e937be86994
SHA1

c43b16677b5798d27a482c99baf018a7a4db75c8
SHA256

e0939d9c93adbd7f74ecffaa3b00222aaa1938c3632d8ca285a8bc781c684bbe
SHA512

67b1acac69d86d0e155cc359dcba30c07c78a19b9b116c103a8b821fae48161639db8969ab157879d1ddd87609868194aa293b670a5838d34254908f99700ae3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b55d5deb1f649f2b09151e937be86994

Files

b55d5deb1f649f2b09151e937be86994
.exe windows:5 windows x86 arch:x86

35ed93bae40e50382a68e058273898aa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCommandLineW
GetSystemDirectoryW
Sleep
CopyFileW
GetVersionExW
GetProcAddress
LoadLibraryA
lstrcatW
DeleteFileW
LocalFree
SetFileAttributesW

shell32

CommandLineToArgvW

Sections

.text
Size: 1024B - Virtual size: 603B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ