801b47769eb053285ce5f2b521f69838 | Triage

Sharing

General

Target

801b47769eb053285ce5f2b521f69838
Size

172KB
MD5

801b47769eb053285ce5f2b521f69838
SHA1

1bb63c5cf4a2787f4f36cc623791661079b19e63
SHA256

e424c6d026d0030c80f52536bddb36c92486c9fce694a0bd4bf626ae299f6e57
SHA512

8166b07bac6137db6bdc8edab87ccfcacdd70a4062d3d82725782aad7a373bb1873a503c420a6d9dcc08a5eee17de843cd70180e3e56e9364837e55d0e4a0184
SSDEEP

1536:pOUPCCdVuUB24Ngwy6SogaaQg2nz+maUmHCNFt2zfLhX:AuCCuS24NfyogaaQdnzZVwLLh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
801b47769eb053285ce5f2b521f69838

Files

801b47769eb053285ce5f2b521f69838
.exe windows:4 windows x86 arch:x86

5e9d4e5b51c999dbe0ac9ad973433245

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceTypesA
GetDateFormatA
IsBadCodePtr
LoadLibraryExA
DeleteCriticalSection
GetLastError
SetLastError
PulseEvent
FreeConsole
IsBadReadPtr
VirtualProtect
GetDriveTypeW
GetModuleHandleA
GetDiskFreeSpaceExW
GetCommandLineA
FindClose
CloseHandle
LocalFree
TlsGetValue
Sleep

shell32

StrChrA
ExtractIconA
DllUnregisterServer
SHFree
SHGetDiskFreeSpaceA
DragFinish
DuplicateIcon
DragAcceptFiles
ShellMessageBoxA
SHGetMalloc
SHGetSettings
DragQueryFileA
ShellAboutA

msasn1

ASN1BERDecCheck
ASN1BERDecBool
ASN1BERDecFlush
ASN1BERDecDouble
ASN1BERDecEoid

advapi32

RegCloseKey

Sections

.text
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ