2d48f94921c5d091d3dfd934cfcb1f59 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d48f94921c5d091d3dfd934cfcb1f59
Size

487KB
MD5

2d48f94921c5d091d3dfd934cfcb1f59
SHA1

edcd7d68415e9f991a46310742c2e53f91e495a0
SHA256

12fcaf20f7915949b93de109efb42f9ac07bcf913e679ff29ee7eec7d98e8ad3
SHA512

40dddf2167ffb8ef7a63edbe7516b56fd818a2b0ab638ce3fd11d3a7da77eab3b34b8c3e51e6179ee8cbc09562b9df1c3fa54713889fec775ec8a86d417eb6ba
SSDEEP

12288:u3B1JzG34PCQXmWRjsjYWaIDfHVJnAIsJYF7fuMa7dZuxPJn1pTz:u3B1JCIPvRjsjYyDNhAt27fuMa7/uxP5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d48f94921c5d091d3dfd934cfcb1f59

Files

2d48f94921c5d091d3dfd934cfcb1f59
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 198KB - Virtual size: 197KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.uro
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE