551db2752474a08b11a47a8a0d387c480d17831c9c59166a6438ee03f979dbd6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

551db2752474a08b11a47a8a0d387c480d17831c9c59166a6438ee03f979dbd6
Size

141KB
MD5

dbc8e098b2e52b9864ed6fb53448de04
SHA1

9f488632d5d0e1302cb401a8fcfdee8bf73f44b1
SHA256

551db2752474a08b11a47a8a0d387c480d17831c9c59166a6438ee03f979dbd6
SHA512

0529d9695ebf43fd9a4c04cd768ff8dd5fc26ec94a916dea16ab4041ca19fa90ab36cfc8f809b5077d8987b247cbc4f21cf6b1a6f3711a7b54379e0e2ba485d8
SSDEEP

3072:eZTzaHXmzyNSnNzut3zIycngj8+kgZjjnD5iURSVdHlKxsT:kT+HXmFnNzszcnmpNnRRS7HSsT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
551db2752474a08b11a47a8a0d387c480d17831c9c59166a6438ee03f979dbd6

Files

551db2752474a08b11a47a8a0d387c480d17831c9c59166a6438ee03f979dbd6
.exe windows:1 windows x86 arch:x86

c7303d87b126353b8a8a72990849dd1d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

kernel32

GetModuleHandleA
GetProcAddress
CloseHandle
GetTickCount
RtlUnwind

crtdll

__GetMainArgs
exit
raise
signal

user32

GetSystemMenu

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 126KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 612B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 316B - Virtual size: 316B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ