547c570077c474a7c9d1cb1e6c0e0548 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

547c570077c474a7c9d1cb1e6c0e0548
Size

84KB
MD5

547c570077c474a7c9d1cb1e6c0e0548
SHA1

d322b9a217a4229482128b890e3a8d302d16f566
SHA256

2b524c2dac1aa829fefd92eeb1576d0d2ff62b7584aebe9bbb10efc53006b8b7
SHA512

906c77e588e5bb11e42787803f8d06e1ae1b17ebbf875fe198d78eeb1a0f54507f698f0d6e7ffdfab7e654c827dafbfe6ce534e7fee903ed680696703735d988
SSDEEP

1536:AUouiOVUoHg7Ewq0NF7wc75o8MSu0Nx6Xy3P:3ouiUA7ZN7weVNbP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
547c570077c474a7c9d1cb1e6c0e0548

Files

547c570077c474a7c9d1cb1e6c0e0548
.exe windows:4 windows x86 arch:x86

d8e3e2faf06eee7c7b4ee26949d54ed4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
__getmainargs
fwrite
cos
fprintf
__p__commode
atexit
fclose
fopen
_errno
_acmdln
strcmp
_XcptFilter
_exit
__p__fmode
_initterm
__setusermatherr
free
exit
malloc
_strnicmp
_adjust_fdiv

kernel32

VirtualProtect
GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ