5c46d97d0a9895ddc04c06b0af903f6e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c46d97d0a9895ddc04c06b0af903f6e
Size

173KB
MD5

5c46d97d0a9895ddc04c06b0af903f6e
SHA1

96d63c1b823b8ae31ecb3b7e941863298b806b8a
SHA256

79e156f5399182f3bfb34288eaf8a6af2841601a7bf2d422a1cb800dd3627001
SHA512

d66281622506e690bdea0c3611b1d195a576ebb27b5b214234384d7d6b05531e43008d7356ff4e0f81e1ce2ddc4ad39c906abea359aa03d53c56aa394c46e140
SSDEEP

1536:guwnKC13tWtYEu3e4J8ev+kaVP2Q9h+UyKPNIWl:S13tREu3e08evcoUyIX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c46d97d0a9895ddc04c06b0af903f6e

Files

5c46d97d0a9895ddc04c06b0af903f6e
.exe windows:4 windows x86 arch:x86

5b002c42510b2f2a73b35f4d2e728335

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
GetTempPathA
GetModuleFileNameA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetModuleHandleA
ExitProcess
GetSystemTimeAsFileTime

user32

wsprintfA

shell32

ShellExecuteA

msvcp71

??_D?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?close@?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ

msvcr71

fopen
__security_error_handler
_except_handler3
_c_exit
_exit
_XcptFilter
_ismbblead
fseek
exit
_acmdln
fread
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit
_controlfp
fwrite
_amsg_exit
fclose
_cexit

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ