47a50014e052e39f2cab767ef2cad67f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47a50014e052e39f2cab767ef2cad67f
Size

631KB
MD5

47a50014e052e39f2cab767ef2cad67f
SHA1

41855a35229379a7aa7454f95591ac81103e02a4
SHA256

7178e6322f0d17246ec69e675398e4d019b417585f1e94cffce0892999a628f4
SHA512

25397da6f0d428568574ec2c935e0b678c8099bbd5c4daafd8054fc8593dc83881fffa749d198a3bf6a2804c4fa8901bd156be34c388571aace9e65be11f952f
SSDEEP

12288:FNqcj2clTNJ8T8mRt4MTD354+2kWsJrS3mwH7+fq1s54L:FtnT/MfmnkWsJrS2wV/L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Verrechnung-6234452-8377148H2.com

Files

47a50014e052e39f2cab767ef2cad67f
.zip
Verrechnung-6234452-8377148H2.com
.exe windows:5 windows x86 arch:x86

dab4252e8e394787570ae1bcd8938c61

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
GetPropA
LoadIconA
CharToOemW
LoadCursorW
MessageBoxA
PostMessageW
GetClassLongW
IsCharUpperA
PeekMessageA
GetDlgItemTextW
LoadBitmapA

kernel32

ReadFile
GetVersionExA
GetTickCount
LoadLibraryExW
GetFileAttributesW
CreateProcessA
CloseHandle
LoadLibraryA
HeapAlloc
VirtualAlloc
OpenFileMappingW
FileTimeToSystemTime
CreateMailslotA
GetACP
FindResourceExA
OpenSemaphoreW
SetCurrentDirectoryW
WriteConsoleW
CopyFileW

nddeapi

NDdeShareSetInfoA
NDdeShareDelA
NDdeShareEnumA

Sections

.text
Size: 648KB - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ