055bbf1d994044bb876a059cfdfaf13e212747b47cd27aaf9eece77a19c1e86e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

055bbf1d994044bb876a059cfdfaf13e212747b47cd27aaf9eece77a19c1e86e
Size

801KB
MD5

d63ab57647894c6fe176e361a94561d5
SHA1

952346d42abc10dc0b9ec68bb3920f22119a6e8e
SHA256

055bbf1d994044bb876a059cfdfaf13e212747b47cd27aaf9eece77a19c1e86e
SHA512

5e9ab0e25aa6dd69c580945c205e82741f27a108c529bab4bd470eb830b37ee403d543df8c7b4d44a8264f98f63c79ac77105307578942ae0f8ce4d139987e84
SSDEEP

12288:Fofx/B1FJX2o+/OWFPj9eH1TxRQxA3WQZR2ATatDRVN21PPkQ/sIOqBAFfKkizHO:Fo1g/1FPZ+fRQxQrZZoVV3QrOFizg1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
055bbf1d994044bb876a059cfdfaf13e212747b47cd27aaf9eece77a19c1e86e

Files

055bbf1d994044bb876a059cfdfaf13e212747b47cd27aaf9eece77a19c1e86e
.exe windows:4 windows x86 arch:x86

77e14d2314d181735ef52e1527d16ce3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcpyA
SetFileTime
HeapSize
GetFileSize
GetLastError
LeaveCriticalSection
lstrcatA
CloseHandle
ReadFile
SetFileTime
IsBadWritePtr
GetExitCodeProcess
SetConsoleTitleA
InterlockedExchange
HeapCreate
GetModuleHandleA
GetStartupInfoW
LoadLibraryA
SetFileTime
GetStringTypeA
CreateEventA

mstscax

DllGetClassObject
DllRegisterServer
DllUnregisterServer
DllCanUnloadNow

shell32

DuplicateIcon
StrChrA
ShellMessageBoxW
ShellAboutA
SHFree
DragQueryFileA
ExtractIconA
SHGetMalloc
DragAcceptFiles
DragFinish
SHGetDiskFreeSpaceA
SHGetSettings
DllUnregisterServer

rasapi32

DwRasUninitialize

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rich
Size: 1KB - Virtual size: 176B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ole
Size: 512B - Virtual size: 112B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 787KB - Virtual size: 786KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ