46bba4d60a7d0a6f3ea41d8f2d1ff5a8

Sharing

Copy URL Twitter E-mail

General

Target

46bba4d60a7d0a6f3ea41d8f2d1ff5a8
Size

694KB
MD5

46bba4d60a7d0a6f3ea41d8f2d1ff5a8
SHA1

0e7c0cafea163a2d27a6165cb4cda1afc196531f
SHA256

81a4aaff9520803ff6cb7f1100024e0c2bc40750c05290f53c5e01b5cff6a59c
SHA512

a2e498ba924405cac6f9ccc6279697725a33ec1a939db2a55a5e337580afc5f37682bdf14deee1221cb192e57de1f23b58a1d9731538063b6a272e85fc0c9442
SSDEEP

12288:h1Wl8T5zM63xjme3fHhtQFGHykkEJVNuoJy:hA2Vdx/htQUSNQvU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46bba4d60a7d0a6f3ea41d8f2d1ff5a8

Files

46bba4d60a7d0a6f3ea41d8f2d1ff5a8
.exe windows:6 windows x86 arch:x86

49be0836dac021f86af2cb207b4613c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OutputDebugStringW
FormatMessageW
VirtualProtect
HeapSize
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetProcessHeap
WriteFile
ExitProcess
HeapReAlloc
HeapFree
HeapAlloc
WriteConsoleW
GetModuleHandleExW
GetModuleFileNameW
GetFileType
GetStdHandle
LoadLibraryExW
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
LCMapStringW
GetCPInfo
CloseHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RaiseException
RtlUnwind
GetLastError
FreeLibrary
CreateFileW

user32

GrayStringA
GetDC
TranslateMessage
DispatchMessageW
PeekMessageW
DefWindowProcW
PostQuitMessage
UnregisterClassW
RegisterClassExW
CreateWindowExW
ShowWindow
SetCapture
ReleaseCapture
LoadImageW
LoadCursorW
SetWindowLongW
GetWindowLongW
AdjustWindowRect
UpdateWindow

d3d11

D3D11CreateDeviceAndSwapChain

gdiplus

GdiplusStartup
GdiplusShutdown

Sections

.text
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 258KB - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

49be0836dac021f86af2cb207b4613c8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

d3d11

gdiplus

Sections

.text Size: 210KB - Virtual size: 210KB

.rdata Size: 258KB - Virtual size: 258KB

.data Size: 4KB - Virtual size: 7KB

.gfids Size: 512B - Virtual size: 336B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 512B - Virtual size: 480B

.text
Size: 210KB - Virtual size: 210KB

.rdata
Size: 258KB - Virtual size: 258KB

.data
Size: 4KB - Virtual size: 7KB

.gfids
Size: 512B - Virtual size: 336B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 512B - Virtual size: 480B