47bd58dbaa59f71df5f9d3c3e4696936 | Triage

Sharing

General

Target

47bd58dbaa59f71df5f9d3c3e4696936
Size

8KB
MD5

47bd58dbaa59f71df5f9d3c3e4696936
SHA1

cbe4ea115bd3b35aa7f49a1ecbfc688b4de2e99e
SHA256

fb8b1f01f6829db94f5213bd596d78818875ddc2bce83f02e72567826fe36ccb
SHA512

dfb6b36438e61c49bab1c8b51d2d53fabec8a57ed1f093ec6720bc772673be6c64610ac805e36bb307c8134ef3c624c9d555651bbd8bf0c0d008921939df0816
SSDEEP

96:F30H0GV2/wUqGhjzyV7nS62sQC4o4fOYyTSzm9izZp43Z9NhU:x0H0G6wUqG9zyV7SM4o4feeEEZpaHhU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47bd58dbaa59f71df5f9d3c3e4696936

Files

47bd58dbaa59f71df5f9d3c3e4696936
.exe windows:4 windows x86 arch:x86

96b2e968c8d942b1c476ffc19880a760

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
_strlwr
strcpy
strcat
strcmp

kernel32

HeapAlloc
GetCommandLineA
GetTempPathA
FindResourceA
LoadResource
LockResource
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetProcessHeap

user32

LoadStringA
wsprintfA
GetForegroundWindow
MessageBoxA

shlwapi

StrToIntA

Sections

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ