b46414cc7858d714ad44946152874beb78c77e6af9e9bcf51ea1aab07e72b53e

Sharing

Copy URL Twitter E-mail

General

Target
b46414cc7858d714ad44946152874beb78c77e6af9e9bcf51ea1aab07e72b53e
Size 12.6MB
Sample260802-sefa7svhnd
SHA256 b46414cc7858d714ad44946152874beb78c77e6af9e9bcf51ea1aab07e72b53e
MD5 18ab2376d529c228c5c908482fa71c97
SHA1 408883f25f44260af40142d24f3cb66e80517a03
SHA512 aca3c06b88455d189a9fa68b3e1d2440ff58f2c4bb0d68a709058424b57b58991927cdae95a59e33a5917b5966dc41a65bde5ea876425c39d2fb7dcf28d97ebb
SSDEEP 393216:l1qRk06olmFco/Zf1ThJ9c6MzT/qLjuY0AA8:vqRd6o2XHG6c/qHuYdA8
TLSH
T1F4D623FD18E161B6D1C3663021C693AA308466DD48FD5D0A3DC37C427F68EAE594EAB3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b46414cc7858d714ad44946152874beb78c77e6af9e9bcf51ea1aab07e72b53e

File Explorer

b46414cc7858d714ad44946152874beb78c77e6af9e9bcf51ea1aab07e72b53e

.exe 12.6MB

b46414cc7858d714ad44946152874beb78c77e6af9e9bcf51ea1aab07e72b53e

IMPHASH 5e2c7f7ea9bb455082ce11657c0034d9
SHA256 b46414cc7858d714ad44946152874beb78c77e6af9e9bcf51ea1aab07e72b53e
MD5 18ab2376d529c228c5c908482fa71c97
SHA1 408883f25f44260af40142d24f3cb66e80517a03
SHA512 aca3c06b88455d189a9fa68b3e1d2440ff58f2c4bb0d68a709058424b57b58991927cdae95a59e33a5917b5966dc41a65bde5ea876425c39d2fb7dcf28d97ebb
SSDEEP 393216:l1qRk06olmFco/Zf1ThJ9c6MzT/qLjuY0AA8:vqRd6o2XHG6c/qHuYdA8
TLSH
T1F4D623FD18E161B6D1C3663021C693AA308466DD48FD5D0A3DC37C427F68EAE594EAB3
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

14244765

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.wmp

Size

Virtual Size

7.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.sCt

Size

12.3MB

Virtual Size

12.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

266KB

Virtual Size

266KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

b46414cc7858d714ad44946152874beb78c77e6af9e9bcf51ea1aab07e72b53e

kernel32

user32

advapi32

shell32

shlwapi

generic