48069ec811b38d33393d1a5517697e53 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48069ec811b38d33393d1a5517697e53
Size

121KB
MD5

48069ec811b38d33393d1a5517697e53
SHA1

8902e6b6719f198a7389685296041e1019422256
SHA256

9d711ba586efc9cddf263318fc84d47774cd9a4435ba2e43498df5789a41f018
SHA512

106343582a41a5f203f38f7654ca6c0654f417e27b41b89b09dfb9e3a0c9d0581e3c1ddf2bf3741be00e5fefb02fa9985e13b31f7f6568c1cd44ffe3c0a8b4de
SSDEEP

3072:sN7l0K6UOp1TofPsvX75aC9mc5Q2gCw+mYApjLO1:s2zDmPstaCkc5Qz3pLO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48069ec811b38d33393d1a5517697e53

Files

48069ec811b38d33393d1a5517697e53
.exe windows:4 windows x86 arch:x86

4501f0f4bcc646a898d54d563cbe3707

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
VirtualProtectEx
LoadLibraryA
ExitProcess
GetLastError
OpenThread
GetThreadContext

user32

PostMessageA
IsChild

Exports

Exports

Wsdprlxxgj
BeginCtbtsmb

Sections

.text
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.DATA2
Size: 3KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 109KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enewdat
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ