4946b43988503745c6d3232ccf3a843f402cb5ee4b61f10103b616788b961366 | Triage

Sharing

General

Target

4946b43988503745c6d3232ccf3a843f402cb5ee4b61f10103b616788b961366
Size

61KB
MD5

629af6083bc0bed26f3ac090672fd3ea
SHA1

ecf72663c8a4461b6a258927a8edae23d3ac915f
SHA256

4946b43988503745c6d3232ccf3a843f402cb5ee4b61f10103b616788b961366
SHA512

d0240f365162462d1deb35737754ba52a0ca049acc7031a4db217cbe8e94ed135a00872da2fb41f19be13f0346677125c461bf3b3118cc8c7a2cb3e730f6357a
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhID:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4946b43988503745c6d3232ccf3a843f402cb5ee4b61f10103b616788b961366

Files

4946b43988503745c6d3232ccf3a843f402cb5ee4b61f10103b616788b961366
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE