x46a5a7d946ce5540237152a1bf59c6e35a6af8e367f614ed6563279214fe805b[.]exe

General

Target
x46a5a7d946ce5540237152a1bf59c6e35a6af8e367f614ed6563279214fe805b.exe
Size 2.1MB
Sample260203-hqcpcafx4e
SHA256 46a5a7d946ce5540237152a1bf59c6e35a6af8e367f614ed6563279214fe805b
MD5 4031af3038564c5508a10c47cf210a25
SHA1 03ce5e254a7cf7621a022891a1ba2cd5f8e703ba
SHA512 de4d81fe9d344d4a3fa557b1a8441b85cfd126b0965f40556f0eaa807fe36731fe8b9d94a7f9195f6d4a67ea6951c26f77871495e2931f657e99118353496638
SSDEEP 24576:MApXKNCM1+T8DGPZ0k9d4fnFn+qz7vmptYAq:rpXKtYbZ06Cnn7vY5q
TLSH
T120A501388654DCEBF29640F56490524770AAF672D6398FFB17A0E22DEA041D11CEEF2D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
x46a5a7d946ce5540237152a1bf59c6e35a6af8e367f614ed6563279214fe805b.exe

File Explorer

x46a5a7d946ce5540237152a1bf59c6e35a6af8e367f614ed6563279214fe805b.exe

.exe 2.1MB

x46a5a7d946ce5540237152a1bf59c6e35a6af8e367f614ed6563279214fe805b.exe

IMPHASH 8a4ce3087bdf40c7b66139698159e2bf
SHA256 46a5a7d946ce5540237152a1bf59c6e35a6af8e367f614ed6563279214fe805b
MD5 4031af3038564c5508a10c47cf210a25
SHA1 03ce5e254a7cf7621a022891a1ba2cd5f8e703ba
SHA512 de4d81fe9d344d4a3fa557b1a8441b85cfd126b0965f40556f0eaa807fe36731fe8b9d94a7f9195f6d4a67ea6951c26f77871495e2931f657e99118353496638
SSDEEP 24576:MApXKNCM1+T8DGPZ0k9d4fnFn+qz7vmptYAq:rpXKtYbZ06Cnn7vY5q
TLSH
T120A501388654DCEBF29640F56490524770AAF672D6398FFB17A0E22DEA041D11CEEF2D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

196988

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CloseHandle CreateFileW CreateThread DeleteCriticalSection EncodePointer EnterCriticalSection ExitProcess FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FlushInstructionCache FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetExitCodeThread GetFileType GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTimeAsFileTime HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExW MultiByteToWideChar QueryPerformanceCounter RaiseException RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwindEx RtlVirtualUnwind SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc VirtualFree VirtualProtect WaitForSingleObject WideCharToMultiByte WriteConsoleW WriteFile

user32

BeginPaint CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW EndPaint FillRect GetMessageW InvalidateRect LoadCursorW PostQuitMessage RegisterClassW ShowWindow TranslateMessage

gdi32

CreatePen CreateSolidBrush DeleteObject Ellipse LineTo MoveToEx Rectangle RoundRect SelectObject TextOutW

Name

.text

Size

240KB

Virtual Size

244KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

40KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

x46a5a7d946ce5540237152a1bf59c6e35a6af8e367f614ed6563279214fe805b.exe

kernel32

user32

gdi32

generic