47b981a68d12a63cc6a2bbcd39b3346e

General

Target

47b981a68d12a63cc6a2bbcd39b3346e
Size

112KB
MD5

47b981a68d12a63cc6a2bbcd39b3346e
SHA1

18ae42dce38eac84292553025a9fb805879bf86c
SHA256

c70721820d6b9cb606eed925d769a7d649f703e12fb489698f718b9ef75cde77
SHA512

769af262cd9a572b455cc42c5a37924ef68264060547e9c63de0e6b553f970adfc5cc2bf9fb9d4ef64235fa92578048a39e286cd49cc7eb0570f2d61c55dbb18
SSDEEP

3072:vOHIRj5f15WMpDFYrIbK08neKPKihJj3jA51:vwIRpHZ2E78hPRk1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47b981a68d12a63cc6a2bbcd39b3346e

Files

47b981a68d12a63cc6a2bbcd39b3346e
.exe windows:4 windows x86 arch:x86

920e009aa8af818b344b6c78c263388d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc71

ord2468
ord764
ord310
ord578
ord784
ord304
ord911
ord313
ord5420
ord1198
ord6118
ord2933
ord299
ord2902
ord876
ord1489
ord297

msvcr71

_onexit
__dllonexit
?terminate@@YAXXZ
__security_error_handler
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_ismbblead
_XcptFilter
_exit
_c_exit
??1type_info@@UAE@XZ
memset
_except_handler3
free
__CxxFrameHandler
srand
time
_controlfp

kernel32

LockResource
CreateFileA
WriteFile
CloseHandle
DeleteFileA
GetWindowsDirectoryA
GetVersionExA
LoadResource
SizeofResource
FindResourceA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
GetStartupInfoA
GetModuleHandleA
DeleteCriticalSection
InitializeCriticalSection
GetLastError

advapi32

RegSetValueExA
RegOpenKeyExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

920e009aa8af818b344b6c78c263388d

Headers

File Characteristics

Imports

mfc71

msvcr71

kernel32

advapi32

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 208B

.rsrc Size: 96KB - Virtual size: 92KB

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 208B

.rsrc
Size: 96KB - Virtual size: 92KB