147d8eedac4dcef5654e17ef8b0058b1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

147d8eedac4dcef5654e17ef8b0058b1
Size

77KB
MD5

147d8eedac4dcef5654e17ef8b0058b1
SHA1

874b2abb092e5365eaf28816997fad80bdf4208e
SHA256

aa82cfd8b41248136ca3b75461249149c894c16a47ccaab6d673823f72a4423c
SHA512

33e593f249d571128f475ee6b13d81a17d363c9de09b322d9bb40c95b22ab117c55493fb29b57c75c019cb80ca71d1cb5451ba6d72c74c8dc988e72f27540c73
SSDEEP

1536:22op96mtiV19mvpHd63+4rcSlYg7pzk/vEuxT1hiNfQNTvXcH:22oz6mti39mxHd1SlYg7VkrR1hBRsH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
147d8eedac4dcef5654e17ef8b0058b1

Files

147d8eedac4dcef5654e17ef8b0058b1
.exe windows:5 windows x86 arch:x86

848f19290ade2a0aa2c7e056fcdce3f9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SubtractRect
CreateMenu
GetClassInfoA
SetWindowsHookA

shlwapi

PathRemoveBlanksA
UrlGetLocationW
AssocQueryStringByKeyA

kernel32

GetPrivateProfileSectionW
SignalObjectAndWait
ExitThread
GetLogicalDrives

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.init
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ