046c36ebef94d4468a7c62ec33b16cd2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

046c36ebef94d4468a7c62ec33b16cd2
Size

27KB
MD5

046c36ebef94d4468a7c62ec33b16cd2
SHA1

5e38411042df22a98e72ed3458cc69f70a68e7f2
SHA256

7d9ed71036d91bd1ec9eef11bcb25ddd4425558c7fcc680161d5bf73c0e2f284
SHA512

3a11ede7bcc60844964bbeccd7ae438fc431a31aa58705e821f2137e75dbb4de78d634f89e19d1bdc09eb64a535d6c8aa788dd16a77ce08514b7112d35d062d7
SSDEEP

768:grYZ2N4vilCOZEJMtvCaJF+D5BFv1yqWDJXLSKo:grYfilhZfvCrDpvyXLSKo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
046c36ebef94d4468a7c62ec33b16cd2

Files

046c36ebef94d4468a7c62ec33b16cd2
.exe windows:4 windows x86 arch:x86

4d719ee228345d42a9a304eeffba48f0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

islower

user32

CharLowerA

ole32

CoUninitialize

oleaut32

VariantClear

Sections

.rdata
Size: 23KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE