48fa17f7aae92837980353c8b0733bacbf0dfd70a47fe3fc3e1177c871348d39 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48fa17f7aae92837980353c8b0733bacbf0dfd70a47fe3fc3e1177c871348d39
Size

13.2MB
MD5

6c55330da33da08e8515f22f8dc7545a
SHA1

505a2943078ebddaba7ae454b881e2f61bebabc0
SHA256

48fa17f7aae92837980353c8b0733bacbf0dfd70a47fe3fc3e1177c871348d39
SHA512

3becb4df5fbd79221b183bb5f7554eb20a21b354da71c09b72ed37b23166a6c3c11e578cf9fce63781dd81e56c190b178a0695de5e7926bfefc45e21368a77ff
SSDEEP

196608:MlwPCDvjunRD3KNQ/fkWgq5MHhhmfYAMywMAviK9QH6L73/ZqQAgQFpTIjvR7e3C:Mv8/BfKhZaeiKbcfg6TIjvR7ejiS3fjm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48fa17f7aae92837980353c8b0733bacbf0dfd70a47fe3fc3e1177c871348d39

Files

48fa17f7aae92837980353c8b0733bacbf0dfd70a47fe3fc3e1177c871348d39
.exe windows:4 windows x86

7d27bf45d5687d520f4596e31d7182a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadStringA

gdi32

SetMapMode

winmm

midiStreamRestart

winspool.drv

ClosePrinter

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA

shell32

Shell_NotifyIconA

ole32

CoTaskMemFree

oleaut32

VariantCopy

comctl32

ImageList_ReplaceIcon

oledlg

ord8

ws2_32

recv

Sections

.text
Size: 4.6MB - Virtual size: 25.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE