48e227b63a58f7569dcac71e2d8c50a2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48e227b63a58f7569dcac71e2d8c50a2
Size

11KB
MD5

48e227b63a58f7569dcac71e2d8c50a2
SHA1

0a1c84b572efee055b2316bf7f613945a5841f61
SHA256

7855701c94e01b4b4cecbed6e6929a8e15cbba9f7e8772e861da7815193df751
SHA512

a7f4dbc8400b9a8acd4ecdc09d0bc8e866e32c7c03a74ed2e62cf58df00c1bd98e701fed119580b3df672f21c6331a89edff5b8089245d010543d7795a40ed5f
SSDEEP

192:X3Y6uyv70Z0K6/41suZ3fCiAeScOXLu8VQue1UvPO06CZqgV51TqV3b0Iz:X3YXyv70yf/2tFAeScYL/8gZTqV3bLz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48e227b63a58f7569dcac71e2d8c50a2

Files

48e227b63a58f7569dcac71e2d8c50a2
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ