46f703064d75758cd37c631246164a48 | Triage

Sharing

General

Target

46f703064d75758cd37c631246164a48
Size

62KB
MD5

46f703064d75758cd37c631246164a48
SHA1

f581868039e91db400fa56aedd71eac3970e78ef
SHA256

911d67c2b0c0eda1943d58fbe032873e3138aa8773efb3ff95bcb9b802c08a87
SHA512

aa5f88b70c183ca80ffcfebe9c25737d452c612f63c2f823149d8d81726278bbd46a4c61996bbe53003aaa0f69339d8260adcd4814eab363e94a1e9c5f271793
SSDEEP

1536:m+xZzcB147csVTSd//ezlH5WFDZO88VUe32HA:X247y//eKhZwShA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46f703064d75758cd37c631246164a48

Files

46f703064d75758cd37c631246164a48
.dll windows:4 windows x86 arch:x86

f1dc948a256cf1da9cdb42389386d691

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

ToAscii
RegisterClassW
OffsetRect
MessageBoxIndirectW
MessageBeep
GetMessageW
FillRect
EmptyClipboard
DispatchMessageW

kernel32

GetOEMCP
InterlockedIncrement
GetUserDefaultLCID
GetConsoleCP
FatalAppExitW
ExitProcess
lstrcatW
SetEnvironmentVariableW
IsDebuggerPresent
DebugBreak
IsBadReadPtr

advapi32

RegOpenKeyExW
RegCloseKey

comdlg32

GetOpenFileNameW
GetFileTitleW

Sections

CODE
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ