48cb3279812f4d1f6947d8279dc0a9fd | Triage

Sharing

General

Target

48cb3279812f4d1f6947d8279dc0a9fd
Size

51KB
MD5

48cb3279812f4d1f6947d8279dc0a9fd
SHA1

ba6ea1175f0d4393c247e92c4e3c9eb3c5da79bc
SHA256

03526bd66211486bac9808ba44b8a04bb9a05de857147cc40ca6daa3958fb4d6
SHA512

874c01045aa1180771029246595cc9411aae0e80229902ce3c38ed6b05d88b6e2f8aa51472bd753b084cc0e2a50ba308675e6b459541b3d6780215aba660a418
SSDEEP

768:Z6aSnCgEzjOAReEUhQwhAw2JAyoR8citqmaRYVsDQqQHF4YtQkmDLE:Z6aSAyAReqwhAw2J4SDUQH2YtQFE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48cb3279812f4d1f6947d8279dc0a9fd

Files

48cb3279812f4d1f6947d8279dc0a9fd
.exe windows:5 windows x86 arch:x86

164cfcac541a7ac8708f5df850d78093

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateFileA
lstrcmpA
lstrlenA
lstrcpynA
GetTickCount
WriteFile
GetCommandLineA
lstrcatA
GetLastError
GetProcAddress
VirtualAlloc
GetTempFileNameA
GetLocalTime
LoadLibraryA
OpenMutexA
FindAtomA
GetModuleFileNameA
GetModuleHandleA
CreateMutexA
CloseHandle
GetVersion
GetTempPathA
GetSystemTime
lstrcpyA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
VirtualQuery
RtlUnwind
IsDebuggerPresent

user32

GetWindowRect
ClientToScreen
wsprintfA
InflateRect
GetCursorPos
GetCaretPos
EqualRect
IsWindowVisible
GetFocus

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE