5549bee54d97917ace1183bd122bb103dab0c216ab957cff114462cfac288176 | Triage

Sharing

General

Target

5549bee54d97917ace1183bd122bb103dab0c216ab957cff114462cfac288176
Size

10KB
MD5

b4c0fcd1295bc6346a57e63e9b269fa4
SHA1

3d32c42b557b8cc9857329cf9dcf05625e3ec638
SHA256

5549bee54d97917ace1183bd122bb103dab0c216ab957cff114462cfac288176
SHA512

5b02263eacc9b6f90da6cb635e88499e93659c97b8131278e9c8c6e88fa2953554176d518565c740ec0d6d164d16755c4fa957a9b536d6fb7dd69cb60c3467bf
SSDEEP

192:s0nlw+8Wi/21hG5xD2IsruHuY5hTCe5eD9CRJghb:sV21hG5xDrlOShTCJD9C4hb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5549bee54d97917ace1183bd122bb103dab0c216ab957cff114462cfac288176

Files

5549bee54d97917ace1183bd122bb103dab0c216ab957cff114462cfac288176
.exe windows:4 windows x86 arch:x86

cd6a193683eb5e077d0a993aa79de0b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memmove
??3@YAXPAX@Z
sprintf
__CxxFrameHandler
strncmp
malloc
free
modf
_ftol
atoi

kernel32

GetProcessHeap
LCMapStringA
IsBadReadPtr
HeapFree
HeapReAlloc
HeapAlloc
ExitProcess
GetModuleHandleA

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 650B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE