46dbf9ecd47c475f9d4fc7d5d41601bf | Triage

Sharing

General

Target

46dbf9ecd47c475f9d4fc7d5d41601bf
Size

12KB
MD5

46dbf9ecd47c475f9d4fc7d5d41601bf
SHA1

5dc39681c13913c3b1b226f3b1f8e4fd191795a6
SHA256

b252b9f54e816b7cfeca6299fe511e59411e828ce0db030933e903d0db1d4690
SHA512

5af7530388a20e4a277b0a04744615106ef8ebe6da2727723ee5541a2a3e9576519cf7e956c55f85f9fd7cbb7895d1de2c6785965634fea3adf77586d0bc180b
SSDEEP

192:nQz5KTL+Lv0+SW4qRRXwiBv4NdMULpUOpOEwBLje:QzMTLiv0+SWtFyX1UOpOEwFe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46dbf9ecd47c475f9d4fc7d5d41601bf

Files

46dbf9ecd47c475f9d4fc7d5d41601bf
.exe windows:1 windows x86 arch:x86

105732f0c6968ac8bea2b4476eda4263

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

MessageBoxA

kernel32

GetProcAddress
GetModuleHandleA
ExitProcess

Sections

CODE
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE