ff56b723ee53ead325370e100f6b0f7616fb6e912210ee06120f33176958c78f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff56b723ee53ead325370e100f6b0f7616fb6e912210ee06120f33176958c78f
Size

6.3MB
MD5

e8c7aee5283db75af0b4d369a0149588
SHA1

7689cb764f960da82675cd42d8c8935a3f73451d
SHA256

ff56b723ee53ead325370e100f6b0f7616fb6e912210ee06120f33176958c78f
SHA512

8119fed115d84bcc38e4b4d060b40c89e1586f0573290708030c31cee6e9627c7e1ba4ad2d0460191014a30cefa6a99130bff0d2a4df1a442ab324b22ee7b0a7
SSDEEP

196608:SbLHcKD8udhfzzzzzzzzzzzzzzzzzzzzyl0G7ivw6F:Sn13/zzzzzzzzzzzzzzzzzzzz406m/F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff56b723ee53ead325370e100f6b0f7616fb6e912210ee06120f33176958c78f

Files

ff56b723ee53ead325370e100f6b0f7616fb6e912210ee06120f33176958c78f
.exe windows:4 windows x86 arch:x86

09e91118f1a2567232d8f5111d043d54

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

kernel32

GetModuleFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

netapi32

Netbios

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ