48c520c6232915a1353defa4067e1906 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48c520c6232915a1353defa4067e1906
Size

91KB
MD5

48c520c6232915a1353defa4067e1906
SHA1

672b3d90c9e260783059163a46ef185aa445f4e0
SHA256

dbbbf425b5929d72e85ec7b82267d1dbf5cbe719ba265cfd8b9f42ead0149f03
SHA512

cc7d674fc0f76cb2cc81d5abb91ebf3b098edaa3c9d288e5f57e7be99d42948045af8027c76f41367a47df203837162a15785b7b50a86d0089b2125e0f117b33
SSDEEP

1536:iX2dhv+GNUVNH6jhnhWm0JOSqElV8/j96OGGHpte0BbvLiNPsw2tmyVbO9y5al:imvvNUXHwWmTSqE3837DeMvLo6myVbO9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48c520c6232915a1353defa4067e1906

Files

48c520c6232915a1353defa4067e1906
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

a1\a7t
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ