c56703f715d5d620eb41b87aca749305 | Triage

Sharing

General

Target

c56703f715d5d620eb41b87aca749305
Size

58KB
MD5

c56703f715d5d620eb41b87aca749305
SHA1

87ba398342c1faf9132a705f98e49b41f105449e
SHA256

28624c1f133f91ebc17131fe1f1f7ec2a5f92cd2ba46017c1c07628d7b57c337
SHA512

f9aceb7a69e1459d95ca06c4fd5483bca822bcc37d62fed8487a1afd7c17e1cbfcb29575c252714fbd393a7c2b721793e81395557d820a9303a61ba9826b8f74
SSDEEP

1536:XY/l+VybhA6MoHLhtEn49OUPAceBiHhVybhFBIkc:XgXbhP3k49O9ce8HmbhFBd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c56703f715d5d620eb41b87aca749305

Files

c56703f715d5d620eb41b87aca749305
.exe windows:4 windows x86 arch:x86

186b5734fd7b52d652af96f610067810

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
Sleep
DeleteFileA
GlobalFree

user32

LoadMenuA
GetFocus

comctl32

ImageList_Copy
MenuHelp

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ