48fbebb72b8b2bfe8c3ce94120837cd0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48fbebb72b8b2bfe8c3ce94120837cd0
Size

726KB
MD5

48fbebb72b8b2bfe8c3ce94120837cd0
SHA1

b2111e823349c5daa0bebea85cb367176b325a8f
SHA256

6dce8e29a47c6bc31324f570be5b66cda242c8c9d210694e3fdbc47f63c999fe
SHA512

85392cc0fb7ddceec54456916fba32238ad250117dc9332eedcd2160dc6ee2d16ea363f146f3bb4eb4c160fe4ebd8bb862465430039d09011d5b75ad1723cd38
SSDEEP

12288:TwECaUglPnFsk7P0UahDyDT12BRXjIjpjH5Y7/LALd:TwEC70qkgUahDuIRI50sh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48fbebb72b8b2bfe8c3ce94120837cd0

Files

48fbebb72b8b2bfe8c3ce94120837cd0
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 318KB - Virtual size: 318KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 254KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ