967548928[.]exe | Triage

Sharing

General

Target

967548928.exe
Size

7.5MB
MD5

848186a88b0b2698fc6966c129b3f988
SHA1

47d48802379460ab5ee2e31f57b7b4ecf88846f6
SHA256

4381d4a66eb1f618508864f87c6da09c67cfea42e21070823326f1ee45fb7b36
SHA512

50c59689cda8bfa0f85faf957db895dc65013511630ba9978d8c7024f083db8248d9ea47b7e8a54e500a8b120e7b6032f9735961cf2c480226c20432a13e46a8
SSDEEP

98304:TOkNKDlogmxjvwTNWF+oVQVbsYb7smpc1aT9GvrVMv/cLUpJl7pUhGaZmCCTQJx+:at+gmxjvwTNh/hpL0KvZlWhGwjEQS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
967548928.exe

Files

967548928.exe
.exe windows:4 windows x86

f9943cfaecdef793953bf19d0662b2a9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

OffsetRect

advapi32

RegQueryValueW

comctl32

DllGetVersion

shell32

SHGetIconOverlayIndexA

mscoree

_CorExeMain

Sections

.idata
Size: - Virtual size: 11.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 103KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE