246fc4c7625f3b80d8511d428f93b113 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

246fc4c7625f3b80d8511d428f93b113
Size

191KB
MD5

246fc4c7625f3b80d8511d428f93b113
SHA1

afff2246940b371997f1fedfbfaa55f99585c96b
SHA256

d5e843af32750edb03a0282e031957d4cc3fd3f78b0fe99c000597cf01d52c07
SHA512

131550fba3dd6b68754c144b55fab8491d7d6fb72f2452381a0af8b1c023f1514c6685af7a34101203847b5b250eb53d70b0e6e4ac7a4ba51f123119c8ac4cde
SSDEEP

3072:eLmK0HpDB/2JtQHdNQTydkCEbHRlhrHkTAPvSYnv5vBXRT4QFvtY7WXQk5aBZTk4:eLqJDB/KEWskCgxlhrHkTAPvSYv5vpGt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
246fc4c7625f3b80d8511d428f93b113

Files

246fc4c7625f3b80d8511d428f93b113
.exe windows:4 windows x86 arch:x86

ea11e59490730360c69db6e21c0d7c1e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DosPathToSessionPathW
SetCurrentDirectoryW
GetUserDefaultLangID
MulDiv
LCMapStringA
OpenMutexW
SetCommBreak
FoldStringA
DeleteTimerQueue
SetFileApisToANSI
GetProfileStringA
SleepEx
MultiByteToWideChar
EraseTape
GetCalendarInfoA
GetCommandLineW

user32

OpenWindowStationW
SendNotifyMessageW
DdeGetLastError

shell32

StrNCmpIA
SheSetCurDrive
StrRChrW
SHHelpShortcuts_RunDLLW
StrChrIA
StrRChrA
PrintersGetCommand_RunDLLA
ExtractIconEx

gdi32

GdiTransparentBlt
SetBoundsRect
GetCharABCWidthsFloatW
RectVisible

Sections

.text
Size: 9KB - Virtual size: 809KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 177KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack32
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ