48749a0a965d4a0c85070df94556e20a6f623c0920a1ddff94313cd9610939f1 | Triage

Sharing

General

Target

48749a0a965d4a0c85070df94556e20a6f623c0920a1ddff94313cd9610939f1
Size

253KB
MD5

c6c78721f048bec7e481ceda338d5c93
SHA1

84230ea96a4507776644049dec4ae948e41163e2
SHA256

48749a0a965d4a0c85070df94556e20a6f623c0920a1ddff94313cd9610939f1
SHA512

8aa4447d92414977eaecb0ae8f84cb7721ab0c29fd603b5e0730c17ce00bfcb7952db06578ff40a99d0643abfd3bb5e1484eef925d5cdb6181cec53aa457b7a6
SSDEEP

6144:C4TyA0O3x/f4AY4WrAOZ2XJg4k2vm12Of:CSyA0O3sfOZg4jO1V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48749a0a965d4a0c85070df94556e20a6f623c0920a1ddff94313cd9610939f1

Files

48749a0a965d4a0c85070df94556e20a6f623c0920a1ddff94313cd9610939f1
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ