a47546cd5244b5bce1dd41c588de349c7cb93369cc7e8e77e32d209c273e1344 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a47546cd5244b5bce1dd41c588de349c7cb93369cc7e8e77e32d209c273e1344
Size

2.5MB
MD5

07e7ad8d2a41bb50100b80f1927e1f94
SHA1

8b52d45411edd7f64256ac86a58b4d5060ac2792
SHA256

a47546cd5244b5bce1dd41c588de349c7cb93369cc7e8e77e32d209c273e1344
SHA512

c3ce92dd26c714fbbc4f8284d313acce0a1a32fd42060fb3a42c03360617328cebc21e607460383e297bcf7b9b98aecbc60064821f9437d7dc1818ec350409b4
SSDEEP

49152:9UXZVPQBJRZQ2h4J9mxH/mxcE0y/CROEQLRDjLYPjtAAuYNXdh5i:QLwhcs/8yHCHO3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a47546cd5244b5bce1dd41c588de349c7cb93369cc7e8e77e32d209c273e1344

Files

a47546cd5244b5bce1dd41c588de349c7cb93369cc7e8e77e32d209c273e1344
.exe windows:4 windows x86

34f3edee8a9b816216173f424a878026

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

CryptAcquireContextA

version

GetFileVersionInfoA

wsock32

WSAAsyncGetHostByName

winspool.drv

ClosePrinter

comctl32

FlatSB_GetScrollInfo

gdi32

AbortDoc

msimg32

AlphaBlend

shell32

SHGetFileInfoW

user32

ActivateKeyboardLayout

winmm

sndPlaySoundA

ole32

CLSIDFromProgID

oleaut32

CreateErrorInfo

gdiplus

GdiplusStartup

Sections

.text
Size: 2.5MB - Virtual size: 10.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE