48b6a20789559330e2feca6413be93a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48b6a20789559330e2feca6413be93a5
Size

7KB
MD5

48b6a20789559330e2feca6413be93a5
SHA1

bcb162a1a1e0d1d860b5b0f40634a14d3fc0c560
SHA256

e7f68b35e3043fe50d34c0a068775ab858ab5f765f3bb6404161306bce24589f
SHA512

3d91aa4b861107477c0e662905bcaa5f0818e127d48eff2f2f1413fe43dea4d14220b4ce99353677836baa6c0efbea35b75a30f97f3b725c57ee86db7519f970
SSDEEP

192:XvBJqALnfeSAZC813/D1ZhbzM60lkwiRK:JUALGZM3lke

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48b6a20789559330e2feca6413be93a5

Files

48b6a20789559330e2feca6413be93a5
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE