446a94aec4a8c8bef7b2386ffb1cc2b7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

446a94aec4a8c8bef7b2386ffb1cc2b7
Size

15KB
MD5

446a94aec4a8c8bef7b2386ffb1cc2b7
SHA1

b18a57bc7f373437393865d98525088c31660962
SHA256

6ddc3a753512e3d7ce9323527120fb3c1fa836d0746ff6b34a47b481dfa24bea
SHA512

6595614ae783f718fa0203060f3973c1019223dfcb410e6e2ef1320985ee4393f9198fe4bc44cbc243e536035a9d56d48ed4cbb546e47e27f73d624ccf433bc6
SSDEEP

384:jzLnyIMzD9tOKyU8R9yvQPXHhlpaUE7PbUhG75bG/NEVFv:HLZkDLb8R1PXHhyDb2GF4kN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
446a94aec4a8c8bef7b2386ffb1cc2b7

Files

446a94aec4a8c8bef7b2386ffb1cc2b7
.exe windows:1 windows x86 arch:x86

3dea0f0649d95302b585f1ae08765afb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA

wsock32

WSAAsyncSelect

wininet

InternetCloseHandle

shell32

ShellExecuteA

advapi32

RegCloseKey

crtdll

__GetMainArgs

Sections

pec1
Size: 10KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pec2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pec
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE