48[.]Rip[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48.Rip.exe
Size

1.2MB
MD5

23695af15d2b091a3d12df7dbbd1493f
SHA1

cd32e305f2feb6488178102497d8a03ac575fb6c
SHA256

851ae6ec669038b341deb956dabc85a773a679dd497785079c020ed375472edb
SHA512

8da0687eafa8f28e8932a7fb44931df259d7e59df5faf86ae8ce50886bd50bd9f660fd41f60dcea0d283d3aed70549c85a1f8c72c48c5d1e966039da265e22e0
SSDEEP

12288:M3Szgy83jlfHf7SnA3Zp8I5Ehp83Szgyu+ElC8Px+wN+ElIY:7zgy8Tlfxp8ImvzgyuVFVt

Score

1^/10

Malware Config

Signatures

Files

48.Rip.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 163KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ