48d8d2eeeb8c94216a259ee43aead83a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48d8d2eeeb8c94216a259ee43aead83a
Size

69KB
MD5

48d8d2eeeb8c94216a259ee43aead83a
SHA1

2b1664aa640b912852c45ca45d78e208ce15b5fd
SHA256

a641bfa38b131c75521170e628388fbda7b5d86d2e3c0b51a926047cab014b08
SHA512

8f11312b9e84d99c5af4fa7755f3a992cf4bb2518ca5b5807a02b2a8200e5297bdcd228d15cb3b023a175eb6e5a02fa11ced324f3e613c7d5ca0032bc52892e3
SSDEEP

1536:pP2+HyWxu7DgZHns53xO8pex/ARc/nWx0aoSZ5bJVBKEAXD25lP10:BPuyMdxrSdfhRS5bvBa2b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48d8d2eeeb8c94216a259ee43aead83a

Files

48d8d2eeeb8c94216a259ee43aead83a
.exe windows:4 windows x86 arch:x86

c8f468f0ff692b97e5d3e75acb48062b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
VirtualProtect
Sleep
SleepEx
GetProcAddress
LoadLibraryA
GetTickCount
CreateFileA
WriteFile
ReadFile
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
GetProcAddress
LoadLibraryA
GetTickCount
CreateFileA
WriteFile
ReadFile

Sections

.text
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE