48bdfd1849b4783b26a1085c25bdcbf2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48bdfd1849b4783b26a1085c25bdcbf2
Size

85KB
MD5

48bdfd1849b4783b26a1085c25bdcbf2
SHA1

8c25523b2065d9287587bcdd8438c45d1dc96c70
SHA256

130b51546d6bbda743f74e81db5a60afdf8bf33f674dfbfd11b6a104d5a51dee
SHA512

d1b3e98fe1cc04e4d3f861a8dc87a9583402dd6ff03f3ef5f4c45bf4e8db8aedda51e620576f67cd269b7fde1db40651aec0014778dc7c34028f755ac2c8c19e
SSDEEP

384:JsvvMV0jHkHY8R4747Cv282Cv+vwSTBUhgQi5qFQbafQD0fQySoK2yu:4Lk48D7Cv28Xv+oS+eQi5jafSzoKz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48bdfd1849b4783b26a1085c25bdcbf2

Files

48bdfd1849b4783b26a1085c25bdcbf2
.exe windows:4 windows x86 arch:x86

255f4fa600b584aef2ae60409997394b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

Imports

msvcrt

memcpy
memcmp
strstr
strlen
strcpy

kernel32

CancelIo
EnumTimeFormatsW
ExitProcess
BackupRead
DuplicateHandle
CommConfigDialogW

urlmon

CoInternetParseUrl
ReleaseBindInfo
URLOpenStreamA
FaultInIEFeature
GetClassFileOrMime

comctl32

ImageList_DragEnter
DrawInsert
ImageList_Remove

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 200KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE