47dc029ce80face4d671d6d0146b8627 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47dc029ce80face4d671d6d0146b8627
Size

48KB
MD5

47dc029ce80face4d671d6d0146b8627
SHA1

c4ecef39affa40fcb66abe8b30194593758a656d
SHA256

cc52819b68105178d3893941a66764c09344490f3d77f97d3d71545db964a3c2
SHA512

f864eeaf8193cf309682cbc7517fc0d5e06d068940e2248e19ac0c5bcc1dacf8104aff98ae5a296331ada0ac7cbc92c629519360f3d570261746cb5c873ae40d
SSDEEP

1536:TQYmgxYA4M9mGxJFV33lSC9RW30e0ZOnHcx:CAjpFd379EEeHHU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47dc029ce80face4d671d6d0146b8627

Files

47dc029ce80face4d671d6d0146b8627
.exe windows:5 windows x86 arch:x86

6718b55b5365304afccb6c37cad621d6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey

kernel32

ReleaseMutex

shlwapi

PathCombineW
PathFileExistsW
PathRemoveFileSpecW
StrCmpNIA
StrCmpNIW
wvnsprintfA
wvnsprintfW

user32

CharLowerBuffA
DispatchMessageA
DrawIcon
FindWindowExA
GetClipboardData
GetCursorPos
GetDlgItemTextA
GetIconInfo
GetKeyState
SendMessageA
SetProcessWindowStation
ToUnicode

Sections

.tot
Size: 38KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cxmv
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fgd
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bhu78z36
Size: 96B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ