48b1ce6449324b714c1cad3b8870b112 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48b1ce6449324b714c1cad3b8870b112
Size

31KB
MD5

48b1ce6449324b714c1cad3b8870b112
SHA1

25b5b2a871f9b66649076860196e3520504d4e01
SHA256

d9526deb0fc52af74e55dea670992e95561c1c15f8149be8686c43c051d3eb7a
SHA512

475e9bf3007fc59b5ac557867296689662e194dbfccf94ba29cf24ede8d98c1a0e68145ef164b6f16c0060033189812fe0c9e42f60d34d771093191814a950c2
SSDEEP

768:Z+h7TzTBziifTeiZSVWihwEknh0L7OTLeNfQfe3:kZ/nEkh8OTKN7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48b1ce6449324b714c1cad3b8870b112

Files

48b1ce6449324b714c1cad3b8870b112
.exe windows:4 windows x86 arch:x86

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ