03b47c428bfd4161e500a37ab4d049ae

General

Target

03b47c428bfd4161e500a37ab4d049ae
Size

58KB
MD5

03b47c428bfd4161e500a37ab4d049ae
SHA1

7d2afaa071c7d10f64fce12d2f67c74fb3597614
SHA256

0a7848d32754555f1e544451e33432907f84ea34de9abda1e497a5abd26a0582
SHA512

d26ab157b83f67a8eaeebac8870524709c7c48fda9c4ae6b98a747cc15a5fd84bd64db097d193f6bb5a3d8164bacdf6bb95744419a5d6b51db17dc3565d70c13
SSDEEP

768:uSvUsSYjK/UBEs5zsJUV6CjEK0fND1jDJ:u1qybs9sJNhFld

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03b47c428bfd4161e500a37ab4d049ae

Files

03b47c428bfd4161e500a37ab4d049ae
.exe .vbs windows:1 windows x86 arch:x86 polyglot

c558615e727b0f32be66b2bc7e2655cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharUpperA
MessageBoxA

kernel32

CloseHandle
CopyFileA
CreateDirectoryA
CreateEventA
CreateFileA
CreateMutexA
CreateProcessA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
ExitThread
FlushFileBuffers
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetCurrentProcess
GetCurrentThreadId
GetFileType
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStdHandle
GetVersion
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
ResumeThread
SetConsoleCtrlHandler
SetEnvironmentVariableA
SetFilePointer
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WaitForSingleObject
WriteFile

ws2_32

shutdown
sendto
setsockopt
socket
htons
inet_addr

Sections

AUTO
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DGROUP
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c558615e727b0f32be66b2bc7e2655cd

Headers

File Characteristics

Imports

user32

kernel32

ws2_32

Sections

AUTO Size: 29KB - Virtual size: 29KB

.idata Size: 1KB - Virtual size: 1KB

DGROUP Size: 24KB - Virtual size: 28KB

.reloc Size: 2KB - Virtual size:

AUTO
Size: 29KB - Virtual size: 29KB

.idata
Size: 1KB - Virtual size: 1KB

DGROUP
Size: 24KB - Virtual size: 28KB

.reloc
Size: 2KB - Virtual size: