48d3224f85bff957ea4eb568279939a9 | Triage

Sharing

General

Target

48d3224f85bff957ea4eb568279939a9
Size

25KB
MD5

48d3224f85bff957ea4eb568279939a9
SHA1

e63b4ccf4e669cbe62bb4e1b1436c96cc5e273f9
SHA256

c61a1f7bf1ee6e63381747c6f608d4aff73bc070585c2953e4cc818c4d36ba56
SHA512

be4b7152951962e9c6d86163b28da736156ebd747dff59693246f33fc2a35a5710727aebe2d54b748341760a0d0a6ca808f23f89f8843ffef3257fbe8ad66ca5
SSDEEP

384:dMngJZLw/sSxshmiqsJJU4gWTGxNd2A4bT8o7O2lkaa79mlUkibG:dMgiPziqsJJU4tSbdBQO2MlbG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48d3224f85bff957ea4eb568279939a9

Files

48d3224f85bff957ea4eb568279939a9
.exe windows:1 windows x86 arch:x86

e2c69898e19633e9830253504d1e2896

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ElfDeregisterEventSource
CryptGetKeyParam
FindFirstFreeAce
GetSecurityDescriptorDacl
GetTokenInformation

kernel32

ClearCommBreak
ConvertThreadToFiber
CreateEventA
CreateMutexA
DefineDosDeviceA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE