047da31d3bc17bd7af149bcb9cca19f7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

047da31d3bc17bd7af149bcb9cca19f7
Size

88KB
MD5

047da31d3bc17bd7af149bcb9cca19f7
SHA1

0b5f2173b7890cc1f375b8fc413b9c2d948d815e
SHA256

c6190551cecfe1873b527b20b0f9beed384253aecb11002c4259642c909788ca
SHA512

2e8455dfad330efbce879d03ebf8afc833cd8dd9b9975e825e1d80de9e0e6b9a324b9a8fe2747c374ad772f6979d909c61faa2c28a026686051fee8844cd1b0d
SSDEEP

1536:Yd2OHfy3IXptSQTO2tCH58V35SkOgcexOJpYl:l5EtxTOSCE34H0uk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
047da31d3bc17bd7af149bcb9cca19f7

Files

047da31d3bc17bd7af149bcb9cca19f7
.exe windows:4 windows x86 arch:x86

64587851e8dceba08b4b929217941954

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
FindClose
VirtualProtect
IsBadReadPtr
IsBadStringPtrA
GetDiskFreeSpaceExA
CloseHandle
SetLocalTime
GetModuleHandleA
GetCommandLineA
ResetEvent
TlsGetValue
EnumResourceTypesW
LocalFree
Heap32First
LoadLibraryExW
SetLastError
GetLogicalDrives
CancelIo
FreeConsole

user32

GetKeyState
DispatchMessageA
CloseWindow
IsIconic
CreateMenu
GetMessageA
DragDetect
EnableWindow
CopyImage
CreateWindowExA
DialogBoxParamA
GetUpdateRect
GetScrollBarInfo

hlink

HlinkClone
HlinkNavigate
HlinkCreateFromString
HlinkCreateFromData
HlinkOnNavigate

advapi32

RegCloseKey

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ