48bc81911e42f2e3a6fe184d7ab70d76 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48bc81911e42f2e3a6fe184d7ab70d76
Size

179KB
MD5

48bc81911e42f2e3a6fe184d7ab70d76
SHA1

6e3f78c8aad688da4ea1e881f156597e60d6f207
SHA256

26bd98ce02cad0848a4602ceea377b274cb94c4c662bd04cbda1b4e53abcf2a3
SHA512

fbdd07ae7d464488019988656ba88686127fbd9f88435070d25edacb3e7dcfac43f260ab5a19a0f61e2fdaf54db682dab486c9184fe672c8cd8d4047fa115315
SSDEEP

3072:wFSET1eMmnV+BzTa6uBKjaizQptplXkOlzN7YvnAUrO7Tx8K16mAR8:EBT1XmnoRTaFBKOikplvXzUq7Tx1a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48bc81911e42f2e3a6fe184d7ab70d76

Files

48bc81911e42f2e3a6fe184d7ab70d76
.exe windows:5 windows x86 arch:x86

a51e9816cfc990ceb97fc1e45f4338c8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrChrIA

kernel32

GetTickCount

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 335KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 130B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.itext
Size: 1024B - Virtual size: 553B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ