c56a773f51a7add39636139b6504fea5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c56a773f51a7add39636139b6504fea5
Size

4KB
MD5

c56a773f51a7add39636139b6504fea5
SHA1

3d9cb8ba4a5a132886f128e1a27611e5e300669e
SHA256

48fcbd0baf7ce2f66009517cc230ee071ab945f1af54f628a5dab0da97df97bd
SHA512

234ae1ed3732a4b4725549a9e840217a0ff98ce57d812d8421f95b8b12b16561c1b8147afd041c46347e0da493c3e396fd94a3af9b05b880f9bd48df4baf74e2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c56a773f51a7add39636139b6504fea5

Files

c56a773f51a7add39636139b6504fea5
.exe windows:4 windows x86 arch:x86

9e099e729afe8628e4f025a477ab8cc0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateRemoteThread
WriteProcessMemory
GetProcAddress
LoadLibraryA
VirtualAllocEx
GetThreadContext
CreateProcessW
lstrcatW
lstrcpyW
GetCurrentProcess
SetThreadContext
TerminateProcess
ResumeThread

user32

wsprintfW

advapi32

RegQueryValueExW
RegOpenKeyW

shell32

SHGetFolderPathW

Sections

.text
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE