46c52ddab4a5c2ddc01f7ffc9ebbd24b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46c52ddab4a5c2ddc01f7ffc9ebbd24b
Size

1.4MB
MD5

46c52ddab4a5c2ddc01f7ffc9ebbd24b
SHA1

af209b61eb749eea1a2120c7648cc15df17f427f
SHA256

43100547d1d170118905269dc5c5653566ae4fb68cdf566c52c61dad9711cfa9
SHA512

f62c592415cab9191385148e9cc0e7edc01d48f3b2210d2e01b3478dd02b09258e8def504f0e40c04944788052d76a59a74aa390fafef6f461113b7e1eaeca68
SSDEEP

24576:9j/X+eSUPYNN7BV4nHdm2P+ZOX1bbtj6p7WnjF/PC:h/XrPY7NUHdm2Wc9wpaE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46c52ddab4a5c2ddc01f7ffc9ebbd24b

Files

46c52ddab4a5c2ddc01f7ffc9ebbd24b
.exe windows:4 windows x86 arch:x86

4c723d6b389aa537ce6b4dd647402524

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
CreateDirectoryA
GetWriteWatch
GetCompressedFileSizeA
VirtualQuery
ExitProcess
GetStartupInfoA

Sections

CODE
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: - Virtual size: 4.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack329
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA