47b9ff889c6a233b780097e32b8de9f9 | Triage

Sharing

General

Target

47b9ff889c6a233b780097e32b8de9f9
Size

141KB
MD5

47b9ff889c6a233b780097e32b8de9f9
SHA1

3ab30c6d01f29b26bf14eeef759df0355221c566
SHA256

b1da986fa3df38a1c2271025374139346639478bca594565a8cc00a352b9c2b2
SHA512

cbbad3d4be170f1b6ad5cdee5ab6fbbf801b957cc2a746ad1397a5b48cf1740e39a7bdf371add8c7e887b0fb99e9954a3b4832c836e55602e8c85c5da8428a22
SSDEEP

3072:HUV1LbymrIqy6tY39L40T9w7tw3vsmeJrOKeTKxoYIrJg4RY3:HUem8rG0T9yk0tt4A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47b9ff889c6a233b780097e32b8de9f9

Files

47b9ff889c6a233b780097e32b8de9f9
.exe windows:4 windows x86 arch:x86

b6ab096e95dcc3996853d5320b7c6032

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

urlmon

HlinkNavigateString

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 132KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE