46a0bc120953b1e430c919dc10831ca6 | Triage

Sharing

General

Target

46a0bc120953b1e430c919dc10831ca6
Size

787KB
MD5

46a0bc120953b1e430c919dc10831ca6
SHA1

268795b472f1d5a524ba7cdac499254645e12e5c
SHA256

5b7075dab6a13dab589f1d9fc80efa7c1a3cf6b4793cf8448f55ff70bce7162d
SHA512

a1387e41329c2087e5ab610781e9e39676f15756f25238edeed9431d39f956346677a2ae15fe7ef6a6a47004a91fd97f3873c83ab0a57c25cd0c6f8022053a21
SSDEEP

24576:rDxK0A5yOSPNxoe45BIbklZXEbiMpFLPLu:r456PEBIQl0DpFri

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46a0bc120953b1e430c919dc10831ca6

Files

46a0bc120953b1e430c919dc10831ca6
.exe windows:4 windows x86 arch:x86

624f0d1a8a72cb4624e65eb1fa5f3721

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
FindResourceA
PulseEvent
SetLastError
ReleaseMutex
CloseHandle
lstrlenW
SetEnvironmentVariableA
TerminateThread
GetModuleHandleA
GetConsoleMode
GetStdHandle
CreateFileA
Sleep
HeapCreate
CreateMutexA
LocalFree
LoadLibraryExW
GlobalUnlock
TlsGetValue

user32

CallWindowProcA
SetFocus
DrawEdge
CheckRadioButton
GetDlgItem
IsWindow
DrawMenuBar
GetDC
DispatchMessageA
GetIconInfo
GetClipCursor
CopyRect
FillRect

apphelp

SdbFindNextTag
SdbFindFirstTag
SdbCloseDatabase
ApphelpCheckIME
SdbGetDatabaseID

clbcatq

ComPlusMigrate

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 778KB - Virtual size: 778KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ