56f40872bc7feb3a5d4f4d7557c6bb00N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56f40872bc7feb3a5d4f4d7557c6bb00N
Size

29KB
MD5

56f40872bc7feb3a5d4f4d7557c6bb00
SHA1

8b6473380341aa081fcf91a40bb0a1671086e85f
SHA256

25756e81a755a17a0b1766078a1d029b10ccd3dd3d9cc3f87730a62536003995
SHA512

e8a1b830d3f58016c4c50ba7836da4d2f845559033a481847759663d8c627980b87a69819957e6c29e2832624c5496bbb844cc7c49016b8f45b6eb2c8976a137
SSDEEP

384:MqvAXxH6zoHAcIWed4+kSLqrXla7vvxlLjlNNNN9MMMlAAAz:zWxMoHNed6a7DZ5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56f40872bc7feb3a5d4f4d7557c6bb00N

Files

56f40872bc7feb3a5d4f4d7557c6bb00N
.exe windows:4 windows x86 arch:x86

d3f16d0bb420f1ef31d9a1b904c27976

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

mfc42

ord823

msvcrt

exit

user32

wsprintfA

shell32

ShellExecuteA

shlwapi

SHDeleteKeyA

ws2_32

setsockopt

iphlpapi

GetIfTable

Sections

.MPRESS1
Size: 10KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE