46eed7dd1339a807cd6021eb54a9a780 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46eed7dd1339a807cd6021eb54a9a780
Size

5KB
MD5

46eed7dd1339a807cd6021eb54a9a780
SHA1

878dad6dadc89ebba0e481edf33fa49c17b9e1e1
SHA256

30b1931c987fc8ea4c7a806a5f5e002099288002f4d06cb4e7e8724468e2f513
SHA512

63fbca473ff7b6e2b9c46a18737fc2f37ff766bbdaff92593b1c9e260e0f40785e53dd111234eed97312ef8c265f229090d14f07f889722acfa13bcee0745560
SSDEEP

96:Dioh6s31X7dwG3Hew+Rm4QWp6P0eCX67rg9OPjEjH:Bcs3B5b50ehg9Oq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46eed7dd1339a807cd6021eb54a9a780

Files

46eed7dd1339a807cd6021eb54a9a780
.exe windows:4 windows x86 arch:x86

b4bccbfb1617824748b7eb8757fcf556

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

DeleteUrlCacheContainerA
DeleteUrlCacheContainerW
FreeUrlCacheSpaceA
ForceNexusLookupExW
FtpOpenFileA
DeleteUrlCacheContainerA
DeleteUrlCacheContainerW
FreeUrlCacheSpaceA

comdlg32

GetOpenFileNameA
LoadAlterBitmap
dwOKSubclass
dwLBSubclass
PageSetupDlgA
ChooseFontA

kernel32

DuplicateHandle
ExitThread
TerminateThread
WriteFile

Sections

.text
Size: 1024B - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 558B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE