647fd9b6c6a7fa0ae2a9bfa19a93824d8a850c56028090653dc5e257ddc7aedfN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

647fd9b6c6a7fa0ae2a9bfa19a93824d8a850c56028090653dc5e257ddc7aedfN
Size

45KB
MD5

ca94362775797668bc34b391046ba740
SHA1

1b0f9c76124fb45188ff236c0a754b687c1425dd
SHA256

647fd9b6c6a7fa0ae2a9bfa19a93824d8a850c56028090653dc5e257ddc7aedf
SHA512

1c8ec41b6ad324de9e6911b8f1479ae687888583373378e49a3c9319e9335296f6a309666d6aa916a911307565eb7d4e28bfc6a525f60fe90278a4d1fb8bcb0a
SSDEEP

768:IY2vb9V6drHOYLES5LbyZWBxf6fVxKfO/arDYDWL3Gq:52vb941RR5iZWLW/GDdqq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
647fd9b6c6a7fa0ae2a9bfa19a93824d8a850c56028090653dc5e257ddc7aedfN

Files

647fd9b6c6a7fa0ae2a9bfa19a93824d8a850c56028090653dc5e257ddc7aedfN
.exe windows:4 windows x86 arch:x86

027c8da71649e190289924ac24ae7f72

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageW
TranslateMessage
DispatchMessageW
SendMessageW
MoveWindow
BeginPaint
EndPaint
GetClientRect
PostQuitMessage
CreateWindowExW
RegisterClassExW
ReleaseDC
GetDC
DefWindowProcW
DrawTextExW

kernel32

CreateFileW
GetStartupInfoA
GetModuleHandleW

gdi32

GetStockObject

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 162B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.spjenww
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ