046d39766b6680f5e5c1a0e7f26d4949 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

046d39766b6680f5e5c1a0e7f26d4949
Size

206KB
MD5

046d39766b6680f5e5c1a0e7f26d4949
SHA1

49c8db4b81e7ed29af3af9510b57e320b3287830
SHA256

9130ec8ce3898a12f3e6cb2f7e0bc858d6d5e8f39d7522327c8a48fc38d0dc14
SHA512

97a9701aecf8c78ae6fc68192031bae91b2e4e59e2c375dd598af93ccd2ef913697fe2233645e0c99c9167f77376b6472790ea190fc1566710c898586f26e2c7
SSDEEP

3072:BwRurcSc1dFPY5Z5LzjvBT6AnTlQ0LGvPnlsPzE1oLZ+1xiSqEEyxGYLbuTWALki:zYS0+5jL/BTFpJooQxiSqScbXkFfY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
046d39766b6680f5e5c1a0e7f26d4949

Files

046d39766b6680f5e5c1a0e7f26d4949
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 16.1MB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: - Virtual size: 953B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE