46db4b82adedb9527937c2d5966db298

General

Target

46db4b82adedb9527937c2d5966db298
Size

141KB
MD5

46db4b82adedb9527937c2d5966db298
SHA1

865c06e7bb90aa4dbf0206912e13257657be3908
SHA256

5c63dba7930e787ed01f635df72541ed7a84d57538cf2312e97d2d013754d655
SHA512

9c208e39407a907fce37e1427a9aa8e8ab760b9ff27d07e441ee76494edee3d1cc1cbc3fc8a5992dcdf7fb717450c575c410132adf9f492d06c370b16e4de853
SSDEEP

3072:w/2DEGQbbolKauejkVkw/ShQw84t7w1eRfXN8Lcq:hDEfbboK7VksShQw82WeR11q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46db4b82adedb9527937c2d5966db298

Files

46db4b82adedb9527937c2d5966db298
.exe windows:4 windows x86 arch:x86

a05ab28ad635903ae17e22e9628102b1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateNamedPipeW
VirtualQueryEx
HeapAlloc
SetStdHandle
_lread
GetLocaleInfoW
ConvertDefaultLocale
WriteFileGather
GetVersionExA
GetModuleHandleA
LocalReAlloc
GetStartupInfoA
FoldStringA
GetCurrentProcessId
GetProfileSectionA
GetComputerNameW

msvcrt

_initterm
__set_app_type
_exit
_XcptFilter
_except_handler3
_beginthreadex
_controlfp
_adjust_fdiv
_mbsdup
_acmdln
__setusermatherr
__getmainargs
log
_inpd
_sys_errlist
__p__commode
exit
_wcsset
__p__fmode

user32

GetTopWindow
RegisterShellHookWindow
GetDlgCtrlID
GetMenuItemInfoW
PostThreadMessageW
AdjustWindowRectEx
GetMenuItemRect
DdeQueryStringA

gdi32

CreateDCW
PolyTextOutW
GetTextMetricsW
GetFontAssocStatus
DeleteMetaFile
GetCharWidthFloatW
GetCharWidthA
GetMetaFileBitsEx

Sections

.text
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a05ab28ad635903ae17e22e9628102b1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

user32

gdi32

Sections

.text Size: 79KB - Virtual size: 79KB

.rdata Size: 50KB - Virtual size: 50KB

.data Size: 512B - Virtual size: 84KB

.rsrc Size: 9KB - Virtual size: 8KB

.text
Size: 79KB - Virtual size: 79KB

.rdata
Size: 50KB - Virtual size: 50KB

.data
Size: 512B - Virtual size: 84KB

.rsrc
Size: 9KB - Virtual size: 8KB