46aa42abf15d9b09296b82bbc9bc31a6cf5423363b8a96e51f7c5ef01bbf96b2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46aa42abf15d9b09296b82bbc9bc31a6cf5423363b8a96e51f7c5ef01bbf96b2
Size

4.8MB
MD5

120ce15df807c8bad1a8b52d66720d92
SHA1

8ee9db27294be95bf0703fd99b2e3df95cd37b00
SHA256

46aa42abf15d9b09296b82bbc9bc31a6cf5423363b8a96e51f7c5ef01bbf96b2
SHA512

6a18b9c4a7dcbad39d4255240279956a3f69e5e08624ba6342fa980993c86606b8061ceb2f250c496a12b6056149c11c57cac09157efd8ea90c20148c9fcac34
SSDEEP

98304:e9AqNbFrqb7w9N6ADjfcqd+JQTmDCjEkuPF+2IHfF+g75IBF3m/uoUwksR:DqTn30E+JQTWkuPF+d0gdksR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46aa42abf15d9b09296b82bbc9bc31a6cf5423363b8a96e51f7c5ef01bbf96b2

Files

46aa42abf15d9b09296b82bbc9bc31a6cf5423363b8a96e51f7c5ef01bbf96b2
.exe windows:4 windows x86 arch:x86

4becdfbde9454bf140fdba095bcb621a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree

user32

GetUserObjectInformationW

advapi32

ReportEventA

netapi32

Netbios

msvcrt

_strnicmp

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

shell32

SHGetFolderPathW

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 824KB - Virtual size: 824KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ