047623bcd0a900274096b03a7a46ba54 | Triage

Sharing

General

Target

047623bcd0a900274096b03a7a46ba54
Size

52KB
MD5

047623bcd0a900274096b03a7a46ba54
SHA1

87b09aea017b1a54a5536acb7b38b435c64a909e
SHA256

db859e0f50689bdb63556b16f936db4e82bf4926e8480dddb3be338a3eab604b
SHA512

a6edf9fc85770200e285b943f78f5af117149ec169381dcdd1fecf4554c632a37680fe2a22f4d9cbaed8590e14746c731e9f40b24069c5b53ed9c3d965f52ce5
SSDEEP

768:L6Jpzg5fO9uaQqErKFwosMKVVtGjkKY9Cz3WeddlLDJRsskFu68uAf3s2Y8GxoIH:L6JFyfO9dEvosRw1M7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
047623bcd0a900274096b03a7a46ba54

Files

047623bcd0a900274096b03a7a46ba54
.exe windows:4 windows x86 arch:x86

d2a4dcf035c93d8afc2b7f5c6b15111b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetStringTypeA
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
GetStringTypeW

user32

MessageBoxA

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ