7a46d2ccc89a09680ccc5543ac35e69f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7a46d2ccc89a09680ccc5543ac35e69f
Size

23KB
MD5

7a46d2ccc89a09680ccc5543ac35e69f
SHA1

0482cde8ddd0e9ff9a6df5506efb25ddd98490fa
SHA256

541f541eda5a597e588f05a085b33955c043a9ba4df0895f068fbd855acf1323
SHA512

7dfda198e0945f0a2c6091907b072350a9e5b3355771c953a2e6ad9599c387072ad73afbcc1b4d922a1ae0ec7a377713f10523d39a25baa54c111301da8556d1
SSDEEP

384:vjo56k6U2Vy1UYBzCPfbDEgxYI2yL9xl15:vjXEU8CPfbgDI2yDv5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a46d2ccc89a09680ccc5543ac35e69f

Files

7a46d2ccc89a09680ccc5543ac35e69f
.exe windows:4 windows x86 arch:x86

ee33a77fa339d045ffbd39f442efd3ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetCommandLineA
HeapAlloc
TlsGetValue
GetModuleHandleA
SetEnvironmentVariableA

user32

LoadCursorFromFileA
ShowCursor

gdi32

CancelDC
GetMapMode
SetWorldTransform
CombineTransform

msvcrt

__p__commode
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
exit
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ