48d1cab47c388cad2881737d7ddf6d75 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48d1cab47c388cad2881737d7ddf6d75
Size

17KB
MD5

48d1cab47c388cad2881737d7ddf6d75
SHA1

e27699884ef4fac42a87b798046a82b095b750b7
SHA256

52bcecc38e66bb9ec56208864c71d7f3113eb1502559e7a439bab6165b28d571
SHA512

f745dc27a2fa1e284108cc2bd24214c1bac19a3b33d94f701628f78046bca2ae69dbee11c9f10706238989e440b1baa247b2b69992493162484258b06c197c5d
SSDEEP

192:cEGewoJw/TwPl/a1j1Cdrc3jZGOI8Q//PAO7Vi7VP1cuWuIN:cE92/TwP1Uj1V3jZj0//oSyVWuP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48d1cab47c388cad2881737d7ddf6d75

Files

48d1cab47c388cad2881737d7ddf6d75
.exe windows:4 windows x86 arch:x86

dd17603e563ee2c1ebc651da93bac885

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
HeapCreate
FindResourceA
GetEnvironmentVariableA
GlobalUnlock
DeleteAtom
GetProcessHeap
CreateMutexA
lstrlenW
GlobalFree
TlsAlloc
CreateFileA
GetCurrentThreadId
ReleaseMutex
CloseHandle
SetLastError
GetModuleHandleA
GetExitCodeProcess
TlsGetValue
GetStdHandle

user32

CreateMenu
GetCaretPos
CallWindowProcA
SetFocus
DispatchMessageA
DrawEdge
CreateWindowExA
CheckRadioButton
GetDC
FillRect
IsWindow
DrawMenuBar
GetDlgItem

ntshrui

GetNetResourceFromLocalPathA
IsPathSharedA
SetFolderPermissionsForSharing
GetLocalPathFromNetResourceA
IsPathSharedW

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

czbdswo
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE