47b520a08dbc539d18e5bbfd68945422 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47b520a08dbc539d18e5bbfd68945422
Size

17KB
MD5

47b520a08dbc539d18e5bbfd68945422
SHA1

e0af202ca073d7056f24e2f7b3352cb8cb33f631
SHA256

be7657c93a2c6ed24c02d4bfa5b82b5176ec30998a129970c25b792323438299
SHA512

c2f26f3c20ccb24ad3c51b277b836c62bd63c57930c9cc3dbb3506d10bba0f7381ad24c9bffe1c6c9925817e6977e7ff0058819fd4c81d5aec3fbcc29f61d2da
SSDEEP

96:2UDVesS0Skt1Jw/4R0pc9l+axyeLe5dylOB5rzvdWrQ:ZEKrtE/zHhf3jB7eQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47b520a08dbc539d18e5bbfd68945422

Files

47b520a08dbc539d18e5bbfd68945422
.exe windows:4 windows x86 arch:x86

c162473f2b23a9ebcac3fd8a0fcf7b1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsA

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ