46ef1abda8c3a0def4e011adb4e7c575 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46ef1abda8c3a0def4e011adb4e7c575
Size

177KB
MD5

46ef1abda8c3a0def4e011adb4e7c575
SHA1

d54da4e35d8d18a1acd7f04ce71e637018765455
SHA256

5a8c08573c52402caa777fc74d8e76581365445c7a7912e6233681c723e91168
SHA512

7a85a40525aa81aed56934c8a49d74b93ebbea38a9efa0ed8915038deb17ad480e6d394c5ee096604acf480ecdf0a2fa0e41411d68df324180c792a63ba9759d
SSDEEP

3072:lkdQ1CnA/W1fOJK/RsMh9D1453kub6dtUJIuTI0Iqj7:FCA/W1fV/RDwLbe2vtIq/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46ef1abda8c3a0def4e011adb4e7c575

Files

46ef1abda8c3a0def4e011adb4e7c575
.exe windows:4 windows x86 arch:x86

884a9734109037ff1d9cc912432bd46e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

wininet

InternetReadFile

winmm

PlaySoundW

Sections

CODE
Size: 159KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE