48288c20feefa328b4e0583f358979b9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48288c20feefa328b4e0583f358979b9
Size

1.1MB
MD5

48288c20feefa328b4e0583f358979b9
SHA1

ffb382ac012fadb88a35bd1dee2178e7f1571212
SHA256

69d732fb62a10971a37ddbc2aeed36920470125757b35c810aff06111ac4f700
SHA512

c8bec02df89cf22863df4a14a12491ac6e7b971bd982bc5673c6ab369ec1957338f8a67d26914f8bd0de1d2a07b185476b1e4bf42d0d39c154a96ae6fff88e79
SSDEEP

12288:ZwCXnLquXU99IC4j7xrcqPkePh+RvMaBlYJQCe2m9Or:mFn9p4jFMePh+RpBlU69Or

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48288c20feefa328b4e0583f358979b9

Files

48288c20feefa328b4e0583f358979b9
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 813KB - Virtual size: 828KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE