47d11e048f166a938b11d147c145fc63 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47d11e048f166a938b11d147c145fc63
Size

20KB
MD5

47d11e048f166a938b11d147c145fc63
SHA1

9e99ca92d4e8c6faaccf5b98697de501307723bf
SHA256

96734a614bf6d3a1642b2881b9b464720eb38fc5710df6ac3a5d78f8b062e36e
SHA512

507bb1fffd420c6ce7ac659609895893de6dc175fd3b02bf9a8187d3d169759fdef9a7fa245487c0f08eb8183b1da60493b10daea4ea137f89dda52e9b3fe09f
SSDEEP

384:nA47KHb66EVtE4+iaZvranFwYcwgZEhHinRgU6A:nZ7i660+iCTanFwXwgECRD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47d11e048f166a938b11d147c145fc63

Files

47d11e048f166a938b11d147c145fc63
.exe windows:4 windows x86 arch:x86

0b47e4df54daa0030dbbf8f206ae6a29

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA

winhttp

DllGetClassObject

comdlg32

GetFileTitleW

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject

kernel32

GetLastError
VirtualAlloc

advapi32

WmiQuerySingleInstanceA

Sections

.text
Size: 1024B - Virtual size: 539B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 14KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 661B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ