48e96d7148d5020a39c22ec457423ae7aefd92bf46ed7a16ac2542d7c7e4306f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48e96d7148d5020a39c22ec457423ae7aefd92bf46ed7a16ac2542d7c7e4306f
Size

92KB
MD5

b7aaed0a4b3f43be13c53cc4997a21b4
SHA1

98436ec4078922fd671d48d1458aa2762eea69a6
SHA256

48e96d7148d5020a39c22ec457423ae7aefd92bf46ed7a16ac2542d7c7e4306f
SHA512

8f7c3f2dc11448a296ca233a7d0721efca92aa901f0ffd39e9068853fa93585c2d465edc407db0d91978a8dbff9e009562bc26a7c406a5fb679dedf2a9f6d2e2
SSDEEP

1536:PAFKu/C1ycVuWm7n7HL6V4Z83YacIyP/69QAq0Gb8/Z5H83oKz:fgoYHGVIKYBbWq0GQP0oKz

Score

N/A

Malware Config

Signatures

Files

48e96d7148d5020a39c22ec457423ae7aefd92bf46ed7a16ac2542d7c7e4306f
.exe windows x86

2af7ce2252e80b8292916a23dc277b35

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageW
DefineDosDeviceA
IsProcessorFeaturePresent
HeapExtend
SetCommState
lstrcatW
InterlockedCompareExchange
CreateProcessW
GetVolumeNameForVolumeMountPointA
OpenSemaphoreW
FindNextFileA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE