48c22e36370f4dfdef0e8303b4e2788c | Triage

Sharing

General

Target

48c22e36370f4dfdef0e8303b4e2788c
Size

7KB
MD5

48c22e36370f4dfdef0e8303b4e2788c
SHA1

3ea8693ff9da5a29374e8c504932393c0da8b02f
SHA256

9d70b7ad8e97e143e5647e12fa13b33f4af8583566b32982cbe945c232f17a9a
SHA512

e00992e26ef05b3841aa04a9a7fa46c9444bb1a2e55db9caef8fac433437bc5ece55fa37f1bc0385485445ece339e61ae4af23ca2d9fbed00ff75829b81d790f
SSDEEP

96:TNm90o/0c6F3RRFavI8ik/z1qs0j5IyFkIyFGz4VQEQ+5:TNmyNDF3pavI1iN+hzKRQ+5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48c22e36370f4dfdef0e8303b4e2788c

Files

48c22e36370f4dfdef0e8303b4e2788c
.exe windows:1 windows x86 arch:x86

eea397c93ba19e2206435a01c8a49a7c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
ExitProcess
ExpandEnvironmentStringsA
FreeLibrary
GetCommandLineA
GetExitCodeThread
GetFileAttributesA
GetLocaleInfoA
GetModuleHandleA
GetProcAddress
GetSystemDefaultLCID
GetSystemDefaultLangID
GetSystemDirectoryA
CloseHandle
GetTempPathA
LoadLibraryA
CopyFileA
LocalAlloc
LocalFree
RtlUnwind
RtlZeroMemory
CreateFileA
SetFilePointer
VerLanguageNameA
WaitForSingleObject
WriteFile
CreateProcessA
CreateThread

user32

LoadCursorA
LoadIconA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
RegisterClassA
CreateWindowExA
DefWindowProcA

crtdll

__GetMainArgs
_sleep
_stricmp
exit
raise
signal
strchr

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 564B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE