46c690ac3500eb2458eb9956949164e0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46c690ac3500eb2458eb9956949164e0N.exe
Size

3KB
MD5

46c690ac3500eb2458eb9956949164e0
SHA1

0b5d6e6ea519994d0dad55ebb0c7dbc671d72f8d
SHA256

a1b742090d9cd1b8488703fc85f770085404df12712edf3bee5d63ebb3ff9a93
SHA512

6846a19eea40b93fa3effb7a08e67f23c558d166230d8b08e48cdfb0c5feb424cfec108a80439e55da9b151c57410a295dc02bf7f97d26a4cf9adeb71f60d109

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46c690ac3500eb2458eb9956949164e0N.exe

Files

46c690ac3500eb2458eb9956949164e0N.exe
.exe windows:4 windows x86 arch:x86

418044603b286f83c4f882e046f88152

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateProcessW
GetCommandLineW
GetExitCodeProcess
GetModuleFileNameW
GetProcessHeap
GetStartupInfoW
GetStdHandle
HeapAlloc
WaitForSingleObject
WriteFile

Sections

.text
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ