48ba18c494afd36c79894d2450a2b72d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48ba18c494afd36c79894d2450a2b72d
Size

57KB
MD5

48ba18c494afd36c79894d2450a2b72d
SHA1

7933824c2429bb815d614d4da72a167065e3aadc
SHA256

1f2b1e85b4d13976823e77944a179f208756d7adf175ef8798d8f678d163bcd2
SHA512

0e1311e567b224e25ddac705c84740f9e9015781bf0ce87d87b5d004dbfc106a8b4d85c27f36b3132099a86e7d20fdcc764d9af6251f817c9f8acc10e981b5af
SSDEEP

1536:dteF/5i5a/Nm4jfT68jATGEjOncOIoPDhF1m59vUDvF:dm/5GEF6sGyctkFFs5eDN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48ba18c494afd36c79894d2450a2b72d

Files

48ba18c494afd36c79894d2450a2b72d
.exe windows:4 windows x86 arch:x86

fab84efcd941e5680f6ed09519f68d64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AccessCheck
BuildSecurityDescriptorA
CryptEncrypt
CryptHashSessionKey
GetAclInformation
GetSecurityDescriptorControl
GetServiceDisplayNameA
SetEntriesInAuditListA

kernel32

SetMailslotInfo

shlwapi

SHRegOpenUSKeyA

user32

DispatchMessageA
DrawMenuBar
ExcludeUpdateRgn
GetMenuCheckMarkDimensions
GetMessagePos
GetTopWindow
IsCharLowerA
IsMenu
MessageBoxA
TrackPopupMenuEx

Sections

.qhej
Size: 22KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xcr
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wfe
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ytij
Size: 25KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ