547d4f62b483f36519a35546f97bd367f625c1b9dc0dd64d0c1c3c38aed4b44c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

547d4f62b483f36519a35546f97bd367f625c1b9dc0dd64d0c1c3c38aed4b44c
Size

324KB
MD5

4943d7b7b8f58d447fd920047a6fd910
SHA1

759d1e556d01094e2801b4dcbce197b35fa4562f
SHA256

547d4f62b483f36519a35546f97bd367f625c1b9dc0dd64d0c1c3c38aed4b44c
SHA512

85e55fd7fe75612375f352e03a92048a2e6f83f632267715744785ba90194e7744e80d24b4473658da523c1cda5bfc1b0221bac5bfb448777808fb89344817e6
SSDEEP

6144:88v5EZGWM9zFaWGB/+7i23kZ2XFWnUKzfFnvKdh1wrf5v6XPfLv/RJQ:88vksBK8Tc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
547d4f62b483f36519a35546f97bd367f625c1b9dc0dd64d0c1c3c38aed4b44c

Files

547d4f62b483f36519a35546f97bd367f625c1b9dc0dd64d0c1c3c38aed4b44c
.exe windows:4 windows x86 arch:x86

eb0bed87afd6ec4ea0efe1f48d1f7af1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
Sleep
HeapCreate
QueryPerformanceCounter
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
HeapReAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE