46d76ad0e5a28f9fd3df65c1b9ea20fb | Triage

Sharing

General

Target

46d76ad0e5a28f9fd3df65c1b9ea20fb
Size

140KB
MD5

46d76ad0e5a28f9fd3df65c1b9ea20fb
SHA1

cded231bd18856183c877726b89b0490e0fc7a29
SHA256

8ae4c474156410b5f6c3ba745ebb80d72e20d94c1823e081cfb5fd76bd120b67
SHA512

59f6a186030c3c0993d08b3ba8381f7125758b4d6bca32ae126d022d639932af08b1f70496839ef79527139d3abd50ea687cdfbc71674f6b3a05d31b420ba9e3
SSDEEP

3072:g7Tw5LquujPdeTawEo4apzIoJkhSGTdbs8r6S:gH8q1JeTahapzz3YdbsS6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46d76ad0e5a28f9fd3df65c1b9ea20fb

Files

46d76ad0e5a28f9fd3df65c1b9ea20fb
.exe windows:4 windows x86 arch:x86

439c4818eaed29aeff588011abe9d448

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
FileTimeToSystemTime
FreeEnvironmentStringsW
FreeLibrary
GetCommandLineA
GetCurrentDirectoryA
GetFileSize
GetLocaleInfoW
GetProcAddress
GetSystemDefaultLCID
InterlockedExchange
LoadResource

user32

CallWindowProcA
FillRect
GetDesktopWindow
GetForegroundWindow
GetSysColor
InvalidateRect
LoadBitmapA
LoadStringA
RegisterClassA
SetFocus
TrackPopupMenu

gdi32

GetStockObject
MoveToEx
Rectangle
SaveDC
SetMapMode
SetStretchBltMode

shell32

DragAcceptFiles
SHBrowseForFolderW
SHGetFileInfo
ShellExecuteW

comctl32

CreatePropertySheetPageA
ImageList_BeginDrag
ImageList_Create
ImageList_GetBkColor
ImageList_GetImageInfo
InitCommonControls
PropertySheetA
PropertySheetW

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ