550d66f67a78eb7734516a28381adfff1e26cd5cf5c275865f465c81fbf5cda9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

550d66f67a78eb7734516a28381adfff1e26cd5cf5c275865f465c81fbf5cda9
Size

119KB
MD5

a2d896facac5657c0927fca6bf65d169
SHA1

840e63ae7d098fa66f792f3cb184a9914d2de6cd
SHA256

550d66f67a78eb7734516a28381adfff1e26cd5cf5c275865f465c81fbf5cda9
SHA512

d58b6953c085e49a09bb4dc0e84164388c6f81f07f3f7bfb510ad5274b6d9ae47f7fc2120ec74488555e7d13ceb8f57265e0544f9f98d3610add5c04c23c9194
SSDEEP

1536:pPhpvrWphcOCMiUhXtDQVV6Dr1LQlLqDcWYvD9duUmm7/K0BcV9kq5zJuYveBsm0:9X6XRfh9cALLgWYRTFBcBzJu4mj5O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
550d66f67a78eb7734516a28381adfff1e26cd5cf5c275865f465c81fbf5cda9

Files

550d66f67a78eb7734516a28381adfff1e26cd5cf5c275865f465c81fbf5cda9
.exe windows:4 windows x86 arch:x86

ff5b3ff8a9e0a708b0833587edc41df4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
CreateEventW
ApplicationRecoveryInProgress
SetThreadLocale
GetProcessPreferredUILanguages
FindNextVolumeMountPointW
GetThreadGroupAffinity
ReplaceFileA
ConnectNamedPipe
GetFileMUIPath

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE