56e1eb9825659944c1aaa0ba3e48f0dfcf590d4f238c34b167c9ad7937683734 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56e1eb9825659944c1aaa0ba3e48f0dfcf590d4f238c34b167c9ad7937683734
Size

67KB
MD5

4e821a01ea3e20e5337e1e8a6648e357
SHA1

491eccf503c1fa34e3fb9319776be6eb6f9d0edd
SHA256

56e1eb9825659944c1aaa0ba3e48f0dfcf590d4f238c34b167c9ad7937683734
SHA512

5be61c9befd0f8142a45f1091c490ed2c5eef78c9dd8f07fb63e05a15ef32d915b5afc082a1c47bd859b8036086696470d1e8c928ee7757c2d1fa00985ddd300
SSDEEP

1536:gaREw0ITfJ92yNxKCC4Mu+OOuswBSjuaLKBznZuy0setPzE:gQZfeyDrCTOSpwZuy0p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56e1eb9825659944c1aaa0ba3e48f0dfcf590d4f238c34b167c9ad7937683734

Files

56e1eb9825659944c1aaa0ba3e48f0dfcf590d4f238c34b167c9ad7937683734
.exe windows:4 windows x86 arch:x86

da3893f0daeda53d2b54c1b361e3db89

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFindAtomW
WaitForThreadpoolIoCallbacks
SetLocalPrimaryComputerNameW
CreateActCtxA
RegLoadMUIStringA
BaseSetLastNTError
SetFileIoOverlappedRange
SetCurrentConsoleFontEx
BasepCheckAppCompat
GetActiveProcessorCount

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE