a46a7077e26161ccb06846a79891cad1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a46a7077e26161ccb06846a79891cad1.exe
Size

488KB
MD5

a46a7077e26161ccb06846a79891cad1
SHA1

674b9b60eb71aba73052ff90edfb246d3233cb24
SHA256

43c6e075a1a257e9b88b8fb5f092144c4167b794bd29a0a631d3a422b0bcd86d
SHA512

239ac4b935105e247d257c1a230df652009a31b7e815a5595eed5282d2899073f1566e6f58a3daab13863e11a021c583ceb67278778dfe46fbc305fa47faba71
SSDEEP

12288:nRX0nYYCQL6RsO+hc8PZsmRTZ7ISetYEP9/2BI:nRXOYYtEsTc2iGN7NeeEPpW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a46a7077e26161ccb06846a79891cad1.exe

Files

a46a7077e26161ccb06846a79891cad1.exe
.exe windows:4 windows x86 arch:x86

c9769632d57dec37c1ea7987e5b02a1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetActiveWindow
IsClipboardFormatAvailable
GetCapture
InsertMenuA

advapi32

ProcessTrace

kernel32

GetVersion

Sections

.text
Size: 481KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 358B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE