46b04790b89a4ee2a018649c9e919b68 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46b04790b89a4ee2a018649c9e919b68
Size

49KB
MD5

46b04790b89a4ee2a018649c9e919b68
SHA1

509d412c3d21e82b106f59d05873727b31d886f4
SHA256

66b3e47b29df41aaf8819b420124761075177e8a5510920485ae382c1818c7de
SHA512

bd951a99d4ce02cb8269cc359158ca4d2bbdcc0cf03a3f02e852fb47c46b114d01228fb2ed7d3b105d4ec68c267eefc30a662d892fced625a4684920e0de05c6
SSDEEP

768:KQ2DRV6GPQ5Z8UxiEAiAgrz8Pj8yk9Etnk2fwCH/q8M57GcdNuHgvxoLZ7sRv0pW:KTV6MarIj8P9Et3fwCHlcdsHOy1YR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46b04790b89a4ee2a018649c9e919b68

Files

46b04790b89a4ee2a018649c9e919b68
.exe windows:1 windows x86 arch:x86

fbbcaea26778bb8361412366cc15b89a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
SetConsoleInputExeNameW
CompareStringA
GetPrivateProfileSectionA
GetConsoleKeyboardLayoutNameW

user32

CharNextW
OemToCharBuffW
EnumDisplaySettingsExW
IMPGetIMEA
GetMenuItemInfoW
CreateDialogIndirectParamA
CharLowerW

gdi32

CreateScalableFontResourceA
LineDDA
GetGlyphOutlineA
GetCharABCWidthsFloatA
GetICMProfileA
CopyEnhMetaFileW
GetEnhMetaFileA

Sections

.code
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.��
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 683B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ