48b04bed00fb0a33dd25c932991014fa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48b04bed00fb0a33dd25c932991014fa
Size

367KB
MD5

48b04bed00fb0a33dd25c932991014fa
SHA1

268d8f5cc7912b9b739d36e2efe507b10c61cdad
SHA256

b46be25e7a55a0f6a810cf32a36f035b3c13b1c0d1cec5f4127358d4e353c4ce
SHA512

8fee92fda7c2cb2d75f7ccad2ed6e6145387778d73ea8ce7032358700f2ecdd13a519960b4276b4d65d2d286e6b2471e81cce54cb8bdb42e63a975a4286e2834
SSDEEP

6144:rpEcAd/Mm5ZkyUneRTnJOmQ4W4/6zA5K0TzJRCp4xRvKUllD/W13+k:rTAOm5eyUnJmCzAXTzJR3RvK6lCwk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48b04bed00fb0a33dd25c932991014fa

Files

48b04bed00fb0a33dd25c932991014fa
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 205KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ