046cfd532d5323dec14ee536348545b7f8a2cafee2aef2d9fba18a2b4423607a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

046cfd532d5323dec14ee536348545b7f8a2cafee2aef2d9fba18a2b4423607a
Size

188KB
MD5

01d3a2c7a3e36eee2466923b89d36a83
SHA1

0f15f5e6c1ad969d7b31b238fa9c2ee61c457ce4
SHA256

046cfd532d5323dec14ee536348545b7f8a2cafee2aef2d9fba18a2b4423607a
SHA512

a886e12bd70103d949f8a230b2665779e2378d98223f36ba80b7abc5c694939ba73b104f4840e1288ebf003f56825afc53f73865dc1a267fa6cecdf2d1dabd97
SSDEEP

3072:QV3zGGExrj2ij7K6rMJSY8bV7vECeAigxMbgjNa:QJKPY6spYxUgjNa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
046cfd532d5323dec14ee536348545b7f8a2cafee2aef2d9fba18a2b4423607a

Files

046cfd532d5323dec14ee536348545b7f8a2cafee2aef2d9fba18a2b4423607a
.exe windows:4 windows x86

02295b181fc309449a5c848a57d8f975

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr80

__set_app_type
_crt_debugger_hook
_unlock
__dllonexit
_lock
_encode_pointer
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_onexit
_amsg_exit

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ