7f47dfabd97c7106416f405453c291338b545ecc1760265848b0f6c6fb9526aaN | Triage

Sharing

General

Target

7f47dfabd97c7106416f405453c291338b545ecc1760265848b0f6c6fb9526aaN
Size

1.4MB
MD5

399a146143efb922c8c6be842e05d530
SHA1

4db910552afc6d172b0b50860bbb51522edf6159
SHA256

7f47dfabd97c7106416f405453c291338b545ecc1760265848b0f6c6fb9526aa
SHA512

68454ad381b87c0cc20ff83974b9fb65a24732bc1f57a8d95bb268b6a74f007e97d1417e075e420c492b053c2085c054fc7e48804d2b61f6151c035c019a7c12
SSDEEP

24576:PSXx8UUb9hwRqVE4ICWC/PzZZ20e/wlZfwCuFAKOazcBUvub+ndVtuo0lx:PSCj/OquNCW+9ZZe4DwCkAnUg+nde7x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f47dfabd97c7106416f405453c291338b545ecc1760265848b0f6c6fb9526aaN

Files

7f47dfabd97c7106416f405453c291338b545ecc1760265848b0f6c6fb9526aaN
.exe windows:6 windows x64 arch:x64

02ab29e4f8baf6c4b4c8a3c2ab7511f5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetModuleHandleA

advapi32

GetUserNameA

shell32

ShellAboutW

user32

GetMenu

Sections

.rsrc
Size: - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE