48352868edb6ead5c71454bbcb8b5496 | Triage

Sharing

General

Target

48352868edb6ead5c71454bbcb8b5496
Size

45KB
MD5

48352868edb6ead5c71454bbcb8b5496
SHA1

e9666038da7cdd1f5909a871c59fa802175ef8e6
SHA256

0c205ce7bc123eea1dfeb7137348876e21fafe7fcd677e3a1547af59daaa1377
SHA512

936b9ca845ec949e6d88fc59209ed2893017601c077cb7601fd4abc8e0131d7003cb27fa25f95ccf9a99346ddebf61ffa077d7c5568fcb59fd4882823e9ae798
SSDEEP

768:ZGvNd8/fRaL6E0RfoHsQK+hd48JkLovIV8/QibUZYqMnCLN+Zud5O3uaKCuWLykw:Z8PII6CsQzd48JkLoIVLibUZYyN+Z4kd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48352868edb6ead5c71454bbcb8b5496

Files

48352868edb6ead5c71454bbcb8b5496
.dll windows:4 windows x86 arch:x86

0be300bf88acdee387d60052e599223f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA

advapi32

RegOpenKeyA

gdi32

DeleteDC

ole32

CoCreateGuid

oleaut32

VariantClear

rasapi32

RasEnumEntriesA

shlwapi

StrChrA

user32

GetFocus

wininet

InternetQueryOptionA

wsock32

send

Exports

Exports

DLLGetClassObject
Init
InitA
InitW
Logon
ss

Sections

.text
Size: 42KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE