46f0b7ba11acfafe4d3d9e9c956a22d2

Sharing

Copy URL

Twitter E-mail

General

Target

46f0b7ba11acfafe4d3d9e9c956a22d2
Size

983KB
MD5

46f0b7ba11acfafe4d3d9e9c956a22d2
SHA1

9f837fb75b997174ca7fd3c7fc81231ba999071c
SHA256

b047efbc8c15d5aae74855aa3ce289122340988f5b2ad7eca47e63825148ee2e
SHA512

3b4db2037bd95a32607ba8ce4a29913c939b27fd00a3ccd77d85e8d4f12fa8d62c4ec28a3d8aa72d07b75f683fd60c203f737bb382462b7b327eafdde9546cb3
SSDEEP

24576:MYnvkpJK8X5uTAJch7XYnU0+FBJKYjnuaKzskX+JN:KppuTFRrIIKokuJN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46f0b7ba11acfafe4d3d9e9c956a22d2

Files

46f0b7ba11acfafe4d3d9e9c956a22d2
.exe windows:5 windows x86 arch:x86

e951bbef2703df03d47378b46842805b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imagehlp

ImageDirectoryEntryToData
ImageNtHeader
ImageRvaToVa
ImageGetDigestStream

shell32

CommandLineToArgvW

user32

CharNextA
CharNextW
wsprintfW

msvcrt

qsort
wcsstr
_wcsicmp
_itow
__winitenv
_except_handler3
iswspace
vwprintf
??2@YAPAXI@Z
_controlfp
_CxxThrowException
_snprintf
fputs
free
strncmp
__set_app_type
_exit
_initterm
_snwprintf
_wcslwr
_itoa
exit
realloc
_purecall
??1type_info@@UAE@XZ
wcslen
_adjust_fdiv
_wcsnicmp
_XcptFilter
__p__fmode
memset
__CxxFrameHandler
??3@YAXPAX@Z
_vsnprintf
__setusermatherr
__dllonexit
strchr
atoi
_onexit
_cexit
_iob
_vsnwprintf
?terminate@@YAXXZ
__p__commode
wcsrchr
__wgetmainargs
_c_exit

ole32

CoUninitialize
StringFromIID
CoInitialize
CoCreateInstance
StringFromCLSID
CLSIDFromString
CoTaskMemFree

msvfw32

ICGetInfo
ICRemove

kernel32

OutputDebugStringA
CloseHandle
lstrlenA
SetFilePointer
CopyFileA
EndUpdateResourceW
FindNextFileW
GetFullPathNameW
GetFileInformationByHandle
GetSystemDirectoryA
lstrlenW
IsDebuggerPresent
GetVersionExW
GetEnvironmentVariableA
LoadLibraryExW
InterlockedIncrement
lstrcpyA
GetLocaleInfoA
FreeResource
RemoveDirectoryA
GetFullPathNameA
ReadFile
GlobalAlloc
GetModuleHandleW
DebugBreak
FreeLibrary
RaiseException
CopyFileW
InterlockedExchange
UpdateResourceW
GetVersion
GetThreadLocale
lstrcmpiA
BeginUpdateResourceW
GetACP
WideCharToMultiByte
LocalFree
InterlockedDecrement
GetFileAttributesA
InterlockedCompareExchange
GetOEMCP
ExitProcess
GlobalFree
GetFileAttributesW
LoadLibraryExA
RemoveDirectoryW
FindClose

Sections

.text
Size: 707KB - Virtual size: 706KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 251KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e951bbef2703df03d47378b46842805b

Headers

File Characteristics

Imports

imagehlp

shell32

user32

msvcrt

ole32

msvfw32

kernel32

Sections

.text Size: 707KB - Virtual size: 706KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 251KB - Virtual size: 251KB

.rsrc Size: 20KB - Virtual size: 3.2MB

.text
Size: 707KB - Virtual size: 706KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 251KB - Virtual size: 251KB

.rsrc
Size: 20KB - Virtual size: 3.2MB