48bfd92c5debf8f23f866103f81daffc | Triage

Sharing

General

Target

48bfd92c5debf8f23f866103f81daffc
Size

69KB
MD5

48bfd92c5debf8f23f866103f81daffc
SHA1

445ea7ff7cf4f87a9207f0b3a22301d9f4f3f543
SHA256

c9d5cdf0a969abd0e25b90418c4f1a8c6d430ac2089223ea29d8e22f5330d116
SHA512

4dfec1220af0d8efb3b724d4f745e531c3ddf460c7893dbd2c854b0606d84388b6c437a43aab8f5d831d51831baa9913fe5b9397a38ea64f1035e17f41162bd5
SSDEEP

1536:wbDshEjGVw5tbjV6w3vT2gDCpx7LJzBClNhkCqNjPTyIjC4LDs:gDsxwjjV/3r2OCb5IUjPTNjC4LDs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48bfd92c5debf8f23f866103f81daffc

Files

48bfd92c5debf8f23f866103f81daffc
.exe windows:4 windows x86 arch:x86

ac02c6bc726e0f985d57d1f22d5114cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
GetSystemDirectoryA
SetEvent
LCMapStringA

msvcrt

_acmdln
fclose
ftell
time
_getcwd
_strcmpi
wcscpy

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ