8c46ca879fe960344223702a89bbf646 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c46ca879fe960344223702a89bbf646
Size

209KB
MD5

8c46ca879fe960344223702a89bbf646
SHA1

2e5db92c0a8178a91d5da5c476b8edc5b301adda
SHA256

5a5e7cee2f17710ca8cd5ac94b951797eff067e9a5de4e219f27807d5a505757
SHA512

ee450020fffd060cae7b4460e090a43c27f23f277e1ba01ac146a09e6b8f4f83634003d8520fb21076eb1fdfd398e6392d911c33ae2c17045127602b3ff669f6
SSDEEP

3072:5ljpNYz0+ckd/s4rjsO3i8x1gfb9MiAstZQ1buwLq8c0TOaeps+g7fxaDEeo/Dcp:5ljUNr/s2sO2RMia1bNcWOaepcX/DV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c46ca879fe960344223702a89bbf646

Files

8c46ca879fe960344223702a89bbf646
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 204KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE