247b32138190b57537fc79165ff9f6b0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

247b32138190b57537fc79165ff9f6b0
Size

67KB
MD5

247b32138190b57537fc79165ff9f6b0
SHA1

a801dd1677597e266fcfd9d9269bbe02866b216c
SHA256

318b9aa1757407d5c6fa68cdc75616b80aa5b8209390135185587c0686f49fa9
SHA512

f49dcf7463b7f3538b885c44cea5c4a0b0b7c67a4ea162462f4abb4b5d04da5310498c59b82328b44612823072a1c939c7bc6c17e3adb17c39f68ebede49642c
SSDEEP

1536:/9z4k04J2YoF8nuvy3rmadFCe+KVEtXrZCJffkDVzLJGCHqUC:1fGFyqypFslt7ZCRsDVzL9K5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
247b32138190b57537fc79165ff9f6b0

Files

247b32138190b57537fc79165ff9f6b0
.exe windows:4 windows x86 arch:x86

7f213467a02546db5bf1f9b03f195828

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
PostQueuedCompletionStatus
lstrcatW
lstrcmpiA
FatalAppExitA
CreateThread
SetFileAttributesA
WriteProfileSectionW
SetConsoleCtrlHandler
DebugSetProcessKillOnExit
LockFileEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 53KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE