0247a38795d6127382a51c0b5d91517c7516c3201f58b39ccdbc2d495fa2ae9f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0247a38795d6127382a51c0b5d91517c7516c3201f58b39ccdbc2d495fa2ae9f
Size

896KB
MD5

c1cf42550de6d7a595a973f8a2e6f8c9
SHA1

b033a8bb648430211d441080bdfc325132ab52e0
SHA256

0247a38795d6127382a51c0b5d91517c7516c3201f58b39ccdbc2d495fa2ae9f
SHA512

4e0190413a53c37b5dc4012a986800a960802a15a47dedd5463bbf4c888331d8fa17eae49ea70798484fed6db84a30dafbc306cf6e5d6d749c9462400fa56e57
SSDEEP

24576:7AmIWG+M0+MnGKjbbRFtRTyyBt5npqhH2gJf+mW8KC8nr:74zS3jbbRTQyz5pqhH2UXjKCq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0247a38795d6127382a51c0b5d91517c7516c3201f58b39ccdbc2d495fa2ae9f

Files

0247a38795d6127382a51c0b5d91517c7516c3201f58b39ccdbc2d495fa2ae9f
.exe windows:4 windows x86 arch:x86

006aa32705c27d3161b97b32dd7b3245

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

__vbaVarTstGt

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

kernel32

GetModuleFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 32KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp
Size: 848KB - Virtual size: 848KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ