48493933[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48493933.exe
Size

564KB
MD5

201940518679da6ae22ae9aaba75ca74
SHA1

a5682657d0667120b2ec8d8424cfb2d01f75a7bb
SHA256

7a030c6ef58fc59c941cef4dadec7d5ce8f1b0057df06aa9eef9fa84aeefa586
SHA512

7499dcdcee31191890b839a66ccaf5920feade97a29f79d5ad6b3d2ef91a8a0c18076307aee1e41e7a926a5c0e391043c8d839151c955b3c9d3522757a31d834
SSDEEP

12288:JIWaAGUd08NTdeme0P1J7PkE4eqH22hGSbVmdmT5GCzu:FGG0wd9XQE4eQXY2msz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48493933.exe

Files

48493933.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 561KB - Virtual size: 561KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ