46a4c5243f9302368d00ad50aee1c09c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46a4c5243f9302368d00ad50aee1c09c
Size

87KB
MD5

46a4c5243f9302368d00ad50aee1c09c
SHA1

3fed1288bb1eb00a22424b1d98dfc5db086599d8
SHA256

7186a23630fe4b0096d72f1e44775387eebb55f19b6fe66f2705d5dccafa09f7
SHA512

84cbde611206ba66d1cca702017547b0ed1dc3887a0100f0b5defbdf9fdb04d9beff59f3fdebc322cccfeab1c20645f4046bb123408c021008c6981f089b9bca
SSDEEP

1536:joI5avvSa3a5m7HWse8DtjpA6+TqQgp8dSu+ebI+wljAffRLcSsH:23pa5m7HC8Dtj1+28dSu+ebI+wliRLct

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46a4c5243f9302368d00ad50aee1c09c

Files

46a4c5243f9302368d00ad50aee1c09c
.exe windows:4 windows x86 arch:x86

d25c439fba60df99c62eaaf6b9213f3b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles
ExitWindowsEx

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoUninitialize

comctl32

ImageList_SetIconSize

wsock32

WSACleanup

Sections

.text
Size: 21KB - Virtual size: 15.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE