1946f2361b66efcb51df0b8609711e6e | Triage

Sharing

General

Target

1946f2361b66efcb51df0b8609711e6e
Size

43KB
MD5

1946f2361b66efcb51df0b8609711e6e
SHA1

7ce4db08f2623f8b7a72b2ffba1f50e3d30b30ef
SHA256

f13b1c674c766083cba391e399ce76131e2dddb7930fa2df198ef6a17aca6c17
SHA512

793b2f5c5ec12330fcf76143c515cdb1530dea95defdb6e91ca133ba3874dea9a7b1ab70cebc2e3b78709615927da407274aec15cd32e5b9729e42dad69cd10b
SSDEEP

768:pmLnEO9JZnaigm8/8IIqaMlN2EHYf/Fj9XTQ224+:pmfjZnf0nMfkY3h9U227

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1946f2361b66efcb51df0b8609711e6e

Files

1946f2361b66efcb51df0b8609711e6e
.exe windows:5 windows x86 arch:x86

164cfcac541a7ac8708f5df850d78093

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateFileA
lstrcmpA
lstrlenA
lstrcpynA
GetTickCount
WriteFile
GetCommandLineA
lstrcatA
GetLastError
GetProcAddress
VirtualAlloc
GetTempFileNameA
GetLocalTime
LoadLibraryA
OpenMutexA
FindAtomA
GetModuleFileNameA
GetModuleHandleA
CreateMutexA
CloseHandle
GetVersion
GetTempPathA
GetSystemTime
lstrcpyA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
VirtualQuery
RtlUnwind
IsDebuggerPresent

user32

GetWindowRect
ClientToScreen
wsprintfA
InflateRect
GetCursorPos
GetCaretPos
EqualRect
IsWindowVisible
GetFocus

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE