b478b6af2cee2207e6192003c0c86f2f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b478b6af2cee2207e6192003c0c86f2f
Size

208KB
MD5

b478b6af2cee2207e6192003c0c86f2f
SHA1

63288e443e146921edd8573b99b8a5e566cf7677
SHA256

c0334898afc3baa11b81ccb1b98f2b2b7dd2ba1821e189526e1d905b9663bf18
SHA512

abfe3e512269e74edc17b16793e68217a22246a5de704c3791a282e1a582aa3673f1be2fde79aba981f4c7a82531c1e75a5cbadc4a47fb86a0cdce49d7e33839
SSDEEP

6144:ilkXVrlZKxxxVFi2Tvy1CEE4XnbZIYGOU18:lXVcV4MDEzXVIYGt18

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b478b6af2cee2207e6192003c0c86f2f

Files

b478b6af2cee2207e6192003c0c86f2f
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 203KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE