47a4c6547aaa57510c4d02ce8a6ae548[.]exe

General

Target
47a4c6547aaa57510c4d02ce8a6ae548.exe
Size 446KB
Sample240707-tlr41sveml
SHA256 86e575388e355071efce2321d937b50793a353bf8f6cbbcbd7a9305fe293683e
MD5 47a4c6547aaa57510c4d02ce8a6ae548
SHA1 a3790a40a319be8eb7c085dbdc2bdbcec4d2fffa
SHA512 2a985ede57263ca8b0b4fe22fdcd000bc19fcf2daccf590a797fd7ec0b8303c3f38991a507baa46c3b469b683d00c59a5f6764cd46a31d79b2744a6930f48061
SSDEEP 12288:w23hQpxY3Tf3jnRqQ4CfcjOh5aerlVAgnFDYh//5NyVx:w23qpxYDLRuCHbamTAgnFs//36
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47a4c6547aaa57510c4d02ce8a6ae548.exe

File Explorer

47a4c6547aaa57510c4d02ce8a6ae548.exe

.exe 446KB

47a4c6547aaa57510c4d02ce8a6ae548.exe

IMPHASH b1fdca67f9b8dae5c0fa30f8218d4955
SHA256 86e575388e355071efce2321d937b50793a353bf8f6cbbcbd7a9305fe293683e
MD5 47a4c6547aaa57510c4d02ce8a6ae548
SHA1 a3790a40a319be8eb7c085dbdc2bdbcec4d2fffa
SHA512 2a985ede57263ca8b0b4fe22fdcd000bc19fcf2daccf590a797fd7ec0b8303c3f38991a507baa46c3b469b683d00c59a5f6764cd46a31d79b2744a6930f48061
SSDEEP 12288:w23hQpxY3Tf3jnRqQ4CfcjOh5aerlVAgnFDYh//5NyVx:w23qpxYDLRuCHbamTAgnFs//36
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

53102

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

OffsetRect

kernel32

CreateFileW HeapSize SetStdHandle WaitForSingleObject Sleep CreateThread VirtualAlloc FreeConsole RaiseException InitOnceBeginInitialize InitOnceComplete CloseHandle WaitForSingleObjectEx GetCurrentThreadId GetExitCodeThread ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW WideCharToMultiByte MultiByteToWideChar GetStringTypeW GetLastError FreeLibraryWhenCallbackReturns CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork GetModuleHandleExW IsProcessorFeaturePresent EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter EncodePointer DecodePointer LCMapStringEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress GetCPInfo IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead GetProcessHeap RtlUnwind SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitThread FreeLibraryAndExitThread ExitProcess GetModuleFileNameW GetStdHandle WriteFile GetCommandLineA GetCommandLineW HeapAlloc HeapFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType GetFileSizeEx SetFilePointerEx FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW WriteConsoleW

Name

.text

Size

168KB

Virtual Size

167KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.bSS

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

50KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

215KB

Virtual Size

219KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

47a4c6547aaa57510c4d02ce8a6ae548.exe

user32

kernel32

generic