46ef9327547c02f18b3aacd05b5cf2c1

Sharing

Copy URL

Twitter E-mail

General

Target

46ef9327547c02f18b3aacd05b5cf2c1
Size

12.3MB
MD5

46ef9327547c02f18b3aacd05b5cf2c1
SHA1

826d12c54a75c5c8166e8ead2407e372ca3992ca
SHA256

edb58c2175190df64d2d3bd6ddd3b59970dc443da2819dfee0805af801100a0f
SHA512

4a5f08d223cbd12e741360bf0bebbf685d9276592dc8baa9be81da8bf932bf2fa23f9fbb15128797abfb765648a01bc837c9e2e6f750254a630657d393473210
SSDEEP

6144:xvk9RADRUv1CCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCCa:aRAD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46ef9327547c02f18b3aacd05b5cf2c1

Files

46ef9327547c02f18b3aacd05b5cf2c1
.exe windows:5 windows x86 arch:x86

2e4ba4c3dc78e85f4cfb392c4546991b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

nddeapi

NDdeShareAddA
NDdeShareGetInfoA
NDdeShareEnumA
NDdeShareSetInfoA

certcli

CACloseCertType
CACloseCA
CADeleteCA
CAEnumFirstCA

user32

IsDialogMessageW
CreateDesktopA
wsprintfW
LoadIconA
LoadMenuW
GetMessageW
DrawStateW
LoadCursorA
DialogBoxParamA
InsertMenuA
PeekMessageW
GetClassLongA
PostMessageW

kernel32

GetModuleHandleA
WaitNamedPipeA
CreateDirectoryA
EnterCriticalSection
lstrcmp
lstrcmp
CreateMutexA
IsBadStringPtrA
FindFirstFileA
FileTimeToLocalFileTime
LoadLibraryW
LoadLibraryExW
GetProcAddress
lstrcmp
lstrcmp
lstrcmp

shlwapi

PathIsRootA
UrlIsA
PathCommonPrefixA
UrlGetPartA
UrlGetLocationA
UrlEscapeA
UrlHashA
PathCombineA
UrlCombineA
UrlCreateFromPathA
UrlIsNoHistoryA
UrlUnescapeA
PathCompactPathA

clusapi

ClusterEnum
CloseCluster
ClusterControl
CloseClusterNode
CloseClusterGroup

advapi32

ReadEventLogW
CryptSignHashA
RegOpenKeyA
RegUnLoadKeyA
RegReplaceKeyA
RegCreateKeyExW
OpenEventLogA
RegRestoreKeyW
IsTextUnicode
GetUserNameA
RegEnumKeyW

comsvcs

CoCreateActivity
CoLoadServices
CoEnterServiceDomain
RecycleSurrogate
SafeRef

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.kdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcrs
Size: 12.2MB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2e4ba4c3dc78e85f4cfb392c4546991b

Headers

DLL Characteristics

File Characteristics

Imports

nddeapi

certcli

user32

kernel32

shlwapi

clusapi

advapi32

comsvcs

Sections

.text Size: 96KB - Virtual size: 96KB

.kdata Size: 8KB - Virtual size: 8KB

.zdata Size: 1KB - Virtual size: 1KB

.rcrs Size: 12.2MB - Virtual size: 1KB

.text
Size: 96KB - Virtual size: 96KB

.kdata
Size: 8KB - Virtual size: 8KB

.zdata
Size: 1KB - Virtual size: 1KB

.rcrs
Size: 12.2MB - Virtual size: 1KB