56afd8e1b9a881a85c0231068947fbd0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56afd8e1b9a881a85c0231068947fbd0N
Size

50KB
MD5

56afd8e1b9a881a85c0231068947fbd0
SHA1

427b40a45e575dbb2f5b9e276e02bd2f6f199616
SHA256

88c6a2f47db36f1b3b4910e7633ba40d716c151a3122b91ec53f254e4ad8bc64
SHA512

92ad6908f8c750313ee8f425b09568b091ffd8d16c66e634856179763bf71857491e4165f62142889341565c2e9879d66ffae3b8e382a467a39a518cfb5b7533
SSDEEP

1536:AOg0V7wdS0P79Jc78x+pu9fWWq53joCTfjK:AO/9wdV79JXMpu9fWWq53jk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56afd8e1b9a881a85c0231068947fbd0N

Files

56afd8e1b9a881a85c0231068947fbd0N
.exe windows:5 windows x86 arch:x86

b05c854936e80ba3420f36ed569f7216

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
GlobalAlloc
GetModuleHandleA
GetLastError
ExitProcess

user32

DefWindowProcA
CreateWindowExA
EndPaint
GetMessageA
LoadCursorA
MessageBoxA
RegisterClassExA
TranslateMessage
BeginPaint
AdjustWindowRectEx
DispatchMessageA

gdi32

GetStockObject
TextOutA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE