48a52179b20b3d2c7935304c3a876be1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48a52179b20b3d2c7935304c3a876be1
Size

166KB
MD5

48a52179b20b3d2c7935304c3a876be1
SHA1

2437cd063749ab3408454749ff95bddde36f65ff
SHA256

782800e20b2f767a7e2ab13919c599328c523c7630d37194f030e7b8e9fa7307
SHA512

1e16f36db19713d21d4b19d0f28e26cba74ba31fe35f2d25a6b05c981de6a5046951c1a0421845210c7ec00fd67cae1c284868dde110ecbe962a227c8e818c88
SSDEEP

3072:FNVu8XQuDXpfqDwJH/EKf4MfPUymP7auz/3bnVAZvBIcSyj8ODJUE9R/dbS:FNBXrDXVqDgH/EZ0PUTaur3bnV2Bgyrq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48a52179b20b3d2c7935304c3a876be1

Files

48a52179b20b3d2c7935304c3a876be1
.exe windows:4 windows x86 arch:x86

c55d58516ab8b94df1945dd02ca3b318

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 133KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE