a46d9eae4bb27fdf8dace2fcbf679e5c | Triage

Sharing

General

Target

a46d9eae4bb27fdf8dace2fcbf679e5c
Size

388KB
MD5

a46d9eae4bb27fdf8dace2fcbf679e5c
SHA1

ed3e2f0c448fc3b52a18e210ffa07869586eb410
SHA256

e0f81776b442d0c7fd8a4df93ac3cf91be91a94c404236337d536b572e8c26e2
SHA512

38c31ce0161aadb833b6a809a4bc4157f3a362cf9787ccd227f1cd546f3cb2d801c4f6660906bb3071032b1895a33b40fc2c0a46c50b300866b1a993e273590f
SSDEEP

6144:rvgfTJC8y8tmxP70eKUtXCy1OwaxCUZ6LjJoxGq6IEkyukCs:rvgGymwkOwoCUMFYGq6y/u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a46d9eae4bb27fdf8dace2fcbf679e5c

Files

a46d9eae4bb27fdf8dace2fcbf679e5c
.exe windows:5 windows x86 arch:x86

4582ffdd7eb98cb63a937096204182b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 80KB

.idata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ