f46daa59d02dde3a19a8f96cf0c9d600a30ffbd6a8950db75c5ffd64a9460ec0 | Triage

Sharing

General

Target

f46daa59d02dde3a19a8f96cf0c9d600a30ffbd6a8950db75c5ffd64a9460ec0
Size

63KB
MD5

2181ff2fed0e954e29042de9577fba1e
SHA1

fbc9e3949c8ebf1c558310460332ea3906f709ce
SHA256

f46daa59d02dde3a19a8f96cf0c9d600a30ffbd6a8950db75c5ffd64a9460ec0
SHA512

531aadb67df50f4b0257d2dded0ea9d439b6fed477de6621002c26641bab740b3ce33a3192ebdc21988afee3e332a5ae2e033b6d79b6f124b9c1a6cdd9bbd7b9
SSDEEP

1536:Qpvj0CPnSG1qIqZPQgzBsf0Y5KruL0JNvcEl6Bxj8IBitLsO2U0kXF1tAD:QBj0CvSG1qiHgyaN1lqXkVkk1E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f46daa59d02dde3a19a8f96cf0c9d600a30ffbd6a8950db75c5ffd64a9460ec0

Files

f46daa59d02dde3a19a8f96cf0c9d600a30ffbd6a8950db75c5ffd64a9460ec0
.exe windows:4 windows x86 arch:x86

c78e09d9f7510173615bb91bd14e9e95

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
BasepNotifyLoadStringResource
GetStringTypeA
Thread32First
GetAppContainerAce
SetLocaleInfoW
SetProtectedPolicy
FindNextFileA
ResolveDelayLoadedAPI
NeedCurrentDirectoryForExePathW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE