46c1326fb08fb9cdf77bed38845122624207a193aa60573c3dff19b61e2bc3e7 | Triage

Sharing

General

Target

46c1326fb08fb9cdf77bed38845122624207a193aa60573c3dff19b61e2bc3e7
Size

6.5MB
MD5

312e3c2597c3982278228ba31c5da28b
SHA1

59c5c2a8573a9bef8355606c2b6cf544d05c0b96
SHA256

46c1326fb08fb9cdf77bed38845122624207a193aa60573c3dff19b61e2bc3e7
SHA512

5b796140b333b20b513d7e44c96ac32291118c2f1a20d56822feb03c3a355d2b0237afc392e302bdd479bdbe15fd004df72095d19220ced9725b21a1c5d157ef
SSDEEP

98304:mz5ayC6Pwq+RqMSKeirWu+viTt5yh2gl3LmRJaR7:03XPwHEMSh0dWC3w2gl3LmRJaR7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46c1326fb08fb9cdf77bed38845122624207a193aa60573c3dff19b61e2bc3e7

Files

46c1326fb08fb9cdf77bed38845122624207a193aa60573c3dff19b61e2bc3e7
.exe windows x86

b45050640641b943f516b33288c6c9b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree

user32

DestroyWindow

gdi32

DeleteObject

psapi

GetModuleFileNameExW

imagehlp

CheckSumMappedFile

comctl32

InitCommonControlsEx

msvcrt

malloc

iphlpapi

GetInterfaceInfo

advapi32

RegOpenKeyExA

Sections

.text
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 879KB - Virtual size: 880KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ