46322621930b9ad72e2d7deb4716bd4ead837f43d8e7de5225738890d6dcabbd | Triage

Sharing

General

Target

46322621930b9ad72e2d7deb4716bd4ead837f43d8e7de5225738890d6dcabbd
Size

43KB
MD5

2ed8b2ec4b11b3fdd685561aa9dc41b9
SHA1

0887dd3a6ae325e575e32ea6286dafe1e35d8c87
SHA256

46322621930b9ad72e2d7deb4716bd4ead837f43d8e7de5225738890d6dcabbd
SHA512

ea0a4be0399d3e6cddaa003ae59d5fa323c1564978756290b28993fdc72c2bbe4825333c955c323310e1f28325abbd2a4885ef4c28a0752c40e3fd73ce0ba3d4
SSDEEP

768:Ycf5IOc5pgYCvZIHVNXaSyoOTH70FA25RXYQAugQR6hprTDEhVXDgkX9:YcfDc5KYCxAnaSyoOTHSA25RXYQAAR6E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46322621930b9ad72e2d7deb4716bd4ead837f43d8e7de5225738890d6dcabbd

Files

46322621930b9ad72e2d7deb4716bd4ead837f43d8e7de5225738890d6dcabbd
.exe windows:6 windows x64 arch:x64

9cd726c398f9ccde1b306fd30f29d3ac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntdll

RtlExitUserProcess

kernel32

AddVectoredExceptionHandler
CreateThread
ExitProcess
FormatMessageW
GetCurrentProcessId
OpenProcess
RemoveVectoredExceptionHandler
VirtualAllocEx
WaitForSingleObject
WriteFile
WriteProcessMemory

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ