system47[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

system47.exe
Size

219KB
MD5

4e01f16dec9289202f20b8782f9a3caa
SHA1

eb6382a8e4026e78f6df87697e8955a0a6124dd0
SHA256

c152573fb31337ac6d5d37c88ca37de312b895f98f3e1e82db96e755d464b7a0
SHA512

ed1f1e6972b7caad255e3215453dd0d01f943851d1a8b059f6eaedbcaad183db7bc4a39d70c5ad02cd63358b8bda0e086df3dd9dc8d5241d4a56deee44787660
SSDEEP

6144:8ifsQvvNBmH3tgQY5ltvQUDELYVA7L6DWyekXZ9bqVgN7L:JsHdgTrvQDLsckWbkXCiN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
system47.exe

Files

system47.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 215KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

kmkVhBwg
Size: 512B - Virtual size: 22B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.????
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ