48ba6a0e92fe992f22f4c62195329a5f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48ba6a0e92fe992f22f4c62195329a5f
Size

150KB
MD5

48ba6a0e92fe992f22f4c62195329a5f
SHA1

80ff2d356f1c2848fe4b999147587dbc7ba7c9de
SHA256

2b64956be7cbcfdcae8a5dd1008da842f6b3bb31ed27bc31e4d69cd1335f9c26
SHA512

e75b6f5de661da30d4e27408f9450903d63edac007f339ce60433dd3e7bfaf3b8dca45e53711fa677e87965c9dca02c818795f404dae22b036586348bba2aaa8
SSDEEP

3072:h3upKuLlx0LST7YxchfAHYh4Nt9PNQ2dQXf+O5aPwuATAq/NW:kdLaOmch44hSt9P9OW8a9ATAUNW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48ba6a0e92fe992f22f4c62195329a5f

Files

48ba6a0e92fe992f22f4c62195329a5f
.exe windows:5 windows x86 arch:x86

f2bb66bf8a9cf364de3b528832229a17

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

advapi32

CryptHashData
DuplicateTokenEx
GetUserNameW
RegEnumKeyExA
RegSetValueExA

shlwapi

PathFileExistsW
SHDeleteKeyA
StrCmpNIA
StrCmpNIW
StrStrW
wnsprintfA

user32

DispatchMessageA
DrawIcon
GetKeyboardState
GetWindowTextA
GetWindowThreadProcessId
LoadCursorA
MsgWaitForMultipleObjects
OpenWindowStationA
PeekMessageA
SetMenuItemInfoW
SetThreadDesktop

Sections

.ybmnid
Size: 45KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.erozwb
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rwzux
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ