46a1fc0c1c2997a50ededa5824ad92dd | Triage

Sharing

General

Target

46a1fc0c1c2997a50ededa5824ad92dd
Size

166KB
MD5

46a1fc0c1c2997a50ededa5824ad92dd
SHA1

2339a633f1398d1f733a529e5d170e64cc1f0351
SHA256

30febaf21e5bd070e13eb22e9e948ebcb8d451eed9186420db6df57ca65f66bc
SHA512

df67145a6a1ebaff5f5f7902f16b44fc25680038bba99909f1933112c1abd5ad43f452553848deb09dd9c75f0a3459180c7ccf234273d7d16ad9341c1ceb7a40
SSDEEP

3072:LWlJ8uGipueZabb6JsCqkIogU4IgmfnNkkPE3C7CX/43eN09:LkOeZEWKCrIxclleeCX/4uG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46a1fc0c1c2997a50ededa5824ad92dd

Files

46a1fc0c1c2997a50ededa5824ad92dd
.exe windows:4 windows x86 arch:x86

3fa257cb17056f916394cc6108126f68

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetVersionExA
LoadLibraryExA
QueryPerformanceFrequency
CreateEventA
GetModuleHandleW
ReadFile
CompareStringA
CompareStringW
GlobalSize
SizeofResource
FreeResource
SearchPathA
FindNextFileA
GetTempFileNameA
GetExitCodeProcess
TerminateProcess
OpenProcess
GetLocalTime
InitializeCriticalSection
GetCurrentProcessId
GetVersion
LeaveCriticalSection
EnterCriticalSection
GetCurrentThread
VirtualQuery
VirtualProtect

rpcrt4

NdrClientCall
RpcBindingSetAuthInfoW
RpcErrorEndEnumeration

ole32

CoDeactivateObject

Sections

.text
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ