55ed9ad15f4c603e19317cc4b5067e88 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55ed9ad15f4c603e19317cc4b5067e88
Size

50KB
MD5

55ed9ad15f4c603e19317cc4b5067e88
SHA1

9ae8d12076403fc1f344c966cc28b82a18acda0b
SHA256

ab217afe8bd5f05fa7de66bd4de55e4d5dd1e0f840040d9d9e8fd25cf58173a3
SHA512

282c6ff77ca4a81c3add0f80562f7f25c73437fafb51132f83ed24e57364faf4a508454a54f522579ad867f0da9dd9e42f547b4d66aad4574c721bedeb74f656
SSDEEP

768:ngdsRKqNgOjLijfzcQaMYx7QR2LYZhgsANeTBVrYsSQjN:pKGp+zcQy7QR2LYZhlANeTnrj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55ed9ad15f4c603e19317cc4b5067e88

Files

55ed9ad15f4c603e19317cc4b5067e88
.exe windows:6 windows x86 arch:x86

d7ff1cfd8bfabff7240dd1e4feb111a6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\users\matth\documents\visual studio 2012\Projects\Project3\Debug\Project3.pdb

Imports

msvcr110d

__FrameUnwindFilter
_amsg_exit
_cexit

kernel32

GetCurrentProcessId
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
Sleep

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ