55796e6384bd9d2b64669ee778e0cc27562f845012858e45cb2a6a4c669a1328N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55796e6384bd9d2b64669ee778e0cc27562f845012858e45cb2a6a4c669a1328N
Size

2.0MB
MD5

5b826cd348cbad3f4efdcc0230a8f320
SHA1

1cd271d73eb02ad308ab4b4bfa6ad157893b70c0
SHA256

55796e6384bd9d2b64669ee778e0cc27562f845012858e45cb2a6a4c669a1328
SHA512

302a794f754ebc0c66a23d908646899f58d4bca37056b8b1a14ba1d6fa2ce1fe98d1a5a42e8b9e14bdba2813495e07c95234598fab7e5a5a31b8ed959d331bf0
SSDEEP

24576:0/11M0WknqY3xK5BRdFyi07Vu1NP1JloLdCOTuQzcTfmnKl+bNwliT46EM:0/1apkZK5PdFy21NBWNQi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55796e6384bd9d2b64669ee778e0cc27562f845012858e45cb2a6a4c669a1328N

Files

55796e6384bd9d2b64669ee778e0cc27562f845012858e45cb2a6a4c669a1328N
.exe windows:4 windows

3d7f155a1f596ea1f38db02f4c5f24d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetCurrentThreadId

user32

GetProcessWindowStation

Sections

.text
Size: 684KB - Virtual size: 684KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE