47e27575e65396620195d6e70db94a45 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47e27575e65396620195d6e70db94a45
Size

32KB
MD5

47e27575e65396620195d6e70db94a45
SHA1

74fa15c138e0b8cff0d30a464447777fac7f39d4
SHA256

44ee54a61e16da5b9c787b30752c6ead8efb5c431eb8836f03a1a4bf26dad8bc
SHA512

8497ae4308b06e66c3cd68abc267db006e248645e10458e923b570f0437e6365683705741bf808e9493f257bea7d45b7228d1eff62f5151e1b0a8ebb1897523b
SSDEEP

384:pRSIhwSfSWrNE3xnkPzjh9ioQrqbaU0Qb+y0wmZ91iNP8dOXxPQeb4GjkOl0kQnl:SymNSNAoQrON6Z91ipvbl+3xz2VP3Sv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47e27575e65396620195d6e70db94a45

Files

47e27575e65396620195d6e70db94a45
.exe windows:5 windows x86 arch:x86

4c0fe6ec6a440c5fbf752224bf2b0f99

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxW

kernel32

GetModuleHandleA
GetSystemDirectoryW
GetCurrentProcess
CloseHandle
LocalFree
FormatMessageW
GetLastError
CreateProcessW

msvcrt

_c_exit
_exit
_XcptFilter
_cexit
exit
swprintf
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
__initenv

ntdll

NtQueryInformationProcess

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ycjokae
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE