0148ca5cfded81a4789f775c1df9c5b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0148ca5cfded81a4789f775c1df9c5b3
Size

172KB
MD5

0148ca5cfded81a4789f775c1df9c5b3
SHA1

4a07cc90c89a0dfd82c717442f6dff65f2aafe5b
SHA256

ab9e00f6b973f7ef2d22a8964128d5af26610a80a0a8fcee9d80dbc4663a7ba5
SHA512

af498544adfa49d36268f5c17d9cbee811fd3ccd8965f9c62f08f517025582e90f560beb2377ee4bf9434df8f017dc567be2a44fb6a4da020d9b606d5214aafb
SSDEEP

3072:/OInnBIFVeiSYJQq94E/nDV0aDV0uHt00ToO0d3EX3vQP1lnftIJynUNWuGMi:/OIn2xn91niaDV0A00Jc3g3vQPrGJynE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0148ca5cfded81a4789f775c1df9c5b3

Files

0148ca5cfded81a4789f775c1df9c5b3
.exe windows:4 windows x86 arch:x86

22aa25a9dbb99211db866b1a30897dd8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetModuleHandleA
GetFileSize
FlushInstructionCache
GetTickCount
VirtualProtect
GetLastError
GetProcAddress
LocalFree
LoadLibraryA
Sleep
LocalAlloc
ReadFile
VirtualProtect

user32

wsprintfA
wvsprintfA

Sections

h@ab+Yye
Size: - Virtual size: 177KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

N\ZP4+ld
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

1o#&_o*@
Size: - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

n"G1$_ ,
Size: - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ffG-jGX4
Size: 168KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE