fc46ee1fe8d2d388bbb202deda371039 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc46ee1fe8d2d388bbb202deda371039
Size

119KB
MD5

fc46ee1fe8d2d388bbb202deda371039
SHA1

605975c45011c7554223e25e2c2a9c82ef29c574
SHA256

09b1fe79780b20f37a8383a84522713bf3b3b8c926523ae17d5d5e71f29cca25
SHA512

38c414b047313e723357295e9580e0b9508c01b3b4a13d7eb8aa352338c030e6219222cd1a66f34a992c4dae7863be177a7baa77bed0a5b9735a2732f416b439
SSDEEP

3072:5Ru8XZTd/D0SA9DMRda2qLZxZyJTYZlL:i8XZT5gQKF/yJTY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc46ee1fe8d2d388bbb202deda371039

Files

fc46ee1fe8d2d388bbb202deda371039
.exe windows:5 windows x86 arch:x86

d53d6b37add8df65642dea4ab6806702

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
GlobalFree
SetEvent
GlobalUnlock
IsProcessorFeaturePresent
WriteFile
CreateFileA
GlobalLock
GlobalAlloc
Sleep
GetTickCount
ExitProcess
CreateThread
lstrcmpA

user32

MessageBoxA
MessageBeep
ReleaseDC
GetSystemMetrics
GetDC
GetClientRect

gdi32

CreateCompatibleBitmap
SetStretchBltMode
CreateCompatibleDC
SelectObject
BitBlt
GetObjectA
GetDIBits
DeleteObject
StretchBlt

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ