46abf88d3d57e478a5fa32e6df5138f2f192f8a5cde413a72ff43caaef0d28df

Sharing

Copy URL Twitter E-mail

General

Target

46abf88d3d57e478a5fa32e6df5138f2f192f8a5cde413a72ff43caaef0d28df
Size

3.3MB
MD5

ff62ddebc5b003c29cca8ed2cb3f1386
SHA1

da3682a5528b7a99834b347288b27f69827e31a8
SHA256

46abf88d3d57e478a5fa32e6df5138f2f192f8a5cde413a72ff43caaef0d28df
SHA512

dcb0d39c8085df868d67f782613d7d26a9c26f9f863c4faf786fb3f913f28bb3f37446f137ea8b0e59e0f5c9638d051f6ff525e67f481e21de17cda2c3ba46ba
SSDEEP

49152:Rl+PndTXnFCina+C6V7wyCK8tzERqNypqJsFOZP0BSzxdZknnV:n+l4itjvCKsARqMpqo8lVknnV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46abf88d3d57e478a5fa32e6df5138f2f192f8a5cde413a72ff43caaef0d28df

Files

46abf88d3d57e478a5fa32e6df5138f2f192f8a5cde413a72ff43caaef0d28df
.exe windows:5 windows x86

129b0cc930f24bb70220550852331ada

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
LocalAlloc
GetCurrentProcess
GetCurrentThread
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
GetLastError
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

LoadIconA

comdlg32

GetOpenFileNameA

shell32

ShellExecuteExA

msvcr100

fclose

msvcp100

?_Xlength_error@std@@YAXPBD@Z

shlwapi

PathRemoveFileSpecA

advapi32

OpenSCManagerW
EnumServicesStatusExW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle

Sections

.text
Size: - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.usp0
Size: - Virtual size: 886KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.usp1
Size: 916KB - Virtual size: 916KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 550KB - Virtual size: 550KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

129b0cc930f24bb70220550852331ada

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

shell32

msvcr100

msvcp100

shlwapi

advapi32

Sections

.text Size: - Virtual size: 29KB

.rdata Size: - Virtual size: 6KB

.data Size: - Virtual size: 2KB

.usp0 Size: - Virtual size: 886KB

.usp1 Size: 916KB - Virtual size: 916KB

.rsrc Size: 550KB - Virtual size: 550KB

.text
Size: - Virtual size: 29KB

.rdata
Size: - Virtual size: 6KB

.data
Size: - Virtual size: 2KB

.usp0
Size: - Virtual size: 886KB

.usp1
Size: 916KB - Virtual size: 916KB

.rsrc
Size: 550KB - Virtual size: 550KB