48060bb8248233eb7d5c39c91807adf4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48060bb8248233eb7d5c39c91807adf4
Size

4.3MB
MD5

48060bb8248233eb7d5c39c91807adf4
SHA1

8d88015f5a04e7aede2c3b32654030f9486d8601
SHA256

79453820bce4674dc9c366a46ec117e8839dd6f1a0fdf3e56658695873473960
SHA512

5349d0fe1048367b37818f8cf277c7e3f49c91f7916e7788dae8d14333edd24505487990e998b671d56ae81196073e087fa52aeaf12e4543563d06dd5b88c899
SSDEEP

98304:n8PO841nF6eUJDTE6tv3Mf+gu9Sd9sNK7pR6m:ncP41oTTZM2gwNOD6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48060bb8248233eb7d5c39c91807adf4

Files

48060bb8248233eb7d5c39c91807adf4
.exe windows:4 windows x86 arch:x86

bf37b27f1e630061a1a370b39ea6c343

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 4.3MB - Virtual size: 15.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE