46747414d28db57aba08bcebc4654cd84394572b448933fbd0e852061897d40b

General

Target
46747414d28db57aba08bcebc4654cd84394572b448933fbd0e852061897d40b
Size 2.5MB
Sample260814-bak78aed72
SHA256 46747414d28db57aba08bcebc4654cd84394572b448933fbd0e852061897d40b
MD5 6cc33e755a99bbc6816a851bf12f7394
SHA1 1c412142144ac498524dd308bc0fe35a88cb495a
SHA512 7a95d2615fa945a3e93aaa26399435f4f75a36a3dbd7c8429ada9351e7cac48c81dfc28001fcdecf3bf6381c6784a15e0bbddbc5a19f9a8bfefe9abe29ad3e31
SSDEEP 49152:icsUr4YuqnG8M9nQmyi6ajwVvlLpcqjrYPgZTuv8XaQfpn+k4dFRMi8nFY:icsUr4YPG8YnQ+6ajwVvJmOAv8XaQfpC
TLSH
T1DEC59E1B6551C072F5920238A129937FB879DE30031AD2CFCBCCB8B5A9716E1567F39A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46747414d28db57aba08bcebc4654cd84394572b448933fbd0e852061897d40b

File Explorer

46747414d28db57aba08bcebc4654cd84394572b448933fbd0e852061897d40b

.exe 2.5MB

46747414d28db57aba08bcebc4654cd84394572b448933fbd0e852061897d40b

SHA256 46747414d28db57aba08bcebc4654cd84394572b448933fbd0e852061897d40b
MD5 6cc33e755a99bbc6816a851bf12f7394
SHA1 1c412142144ac498524dd308bc0fe35a88cb495a
SHA512 7a95d2615fa945a3e93aaa26399435f4f75a36a3dbd7c8429ada9351e7cac48c81dfc28001fcdecf3bf6381c6784a15e0bbddbc5a19f9a8bfefe9abe29ad3e31
SSDEEP 49152:icsUr4YuqnG8M9nQmyi6ajwVvlLpcqjrYPgZTuv8XaQfpn+k4dFRMi8nFY:icsUr4YPG8YnQ+6ajwVvJmOAv8XaQfpC
TLSH
T1DEC59E1B6551C072F5920238A129937FB879DE30031AD2CFCBCCB8B5A9716E1567F39A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

608013

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

438KB

Virtual Size

437KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

43KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

420B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

341KB

Virtual Size

341KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

83KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=18, id=241, version=40116,

count=194, id=243, version=40116,

count=29, id=242, version=40116,

count=20, productName=Unmarked objects (old),

count=8, id=199, version=41118,

count=26, id=259, version=24123,

count=13, id=265, version=24215,

count=86, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=36, id=260, version=24123,

count=67, id=261, version=24123,

count=2, id=261, version=23013,

count=15, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=39, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=466, id=1, productName=Unmarked objects,

count=478, id=260, version=24225,

count=51, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,

count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,

count=1, id=151,

count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,

Sharing

General

Malware Config

Signatures

File Explorer

46747414d28db57aba08bcebc4654cd84394572b448933fbd0e852061897d40b

generic