48b9d26e2bad5d4b2d79edf0cc69c9dc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48b9d26e2bad5d4b2d79edf0cc69c9dc
Size

8KB
MD5

48b9d26e2bad5d4b2d79edf0cc69c9dc
SHA1

9854e2cc2092cabab9c5df0990937d0faeec7779
SHA256

2a5ef58e92afdddb5d88891c1ba7acf32835d25b106053b8efd2f9d91788c4ae
SHA512

028abd244507afa73c80a1721686195a8064e54c3c6428c830c4d86bd3bfe4ce3572761e6415192a16098213f68980754657405831c5b0635abe6357237594f9
SSDEEP

192:lOBxQWw3nUDx2URqoCECuHXx+BS6sdNzKg+flU+v+X:lMekIJrECuL6i8g+flh+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48b9d26e2bad5d4b2d79edf0cc69c9dc

Files

48b9d26e2bad5d4b2d79edf0cc69c9dc
.exe windows:4 windows x86 arch:x86

5d7f04b1045224f8801d147a87132f91

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
GetVersionExA
CloseHandle
CreateThread
lstrcpyA
ExitProcess
lstrlenA
SleepEx
GetTickCount
GetCommandLineA
Sleep
lstrcatA
GetEnvironmentVariableA
GetShortPathNameA
GetStartupInfoA

user32

MessageBoxA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE