48c19b284b6dfadd1d3135700f27c12a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48c19b284b6dfadd1d3135700f27c12a
Size

34KB
MD5

48c19b284b6dfadd1d3135700f27c12a
SHA1

ba72f46d53af99f63de5443eef768cfba7f57fac
SHA256

7cd7da8091926b34846ab05509b1b6728ab63c24b3f3d9cd4014348c23d81686
SHA512

b1794ceaf66925ccfb565656ef4d018a45959b38dd2b53b471cbb0eba7bb51ea91542f32bf6fc1a62257efec2364129f9e03aab934a5660df3adf8f67b3bd5f2
SSDEEP

768:eixSKwTgk5A/Ew3L1PnLOSSVhSHXEMBXxDRlla:fSKY4J6fjFQza

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48c19b284b6dfadd1d3135700f27c12a

Files

48c19b284b6dfadd1d3135700f27c12a
.exe windows:4 windows x86 arch:x86

fd08a4f9214adbf593e8bb626a071957

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DisableThreadLibraryCalls
GetModuleHandleA
GetCurrentProcessId
QueryPerformanceCounter
FreeLibrary
GetSystemTimeAsFileTime
VirtualAlloc
SetLastError
GetProcAddress
GetTickCount
LoadLibraryW

ntdll

NtAddAtom

atl

AtlMarshalPtrInProc

Sections

.textbss
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ