48de6cfd6309a632c1ff1c901404e5c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48de6cfd6309a632c1ff1c901404e5c4
Size

851KB
MD5

48de6cfd6309a632c1ff1c901404e5c4
SHA1

803697c665f65eca71682f8f92dae585b226129c
SHA256

06f4bee658a06b277a740cc05ae3d0404a22efc72c898889e03c9b44efe1bdc8
SHA512

640760d5a55d4bb9596956ca46fc0738a9e7d3d217b698dbffa990301f2718fb52a02243aba7f0ff41339e45da50e57aaa0f8a1a1138c0482368f573a1ada46b
SSDEEP

12288:lVLFvth+w7GodQpbelTQPnfOcnla/mf1Ser+HJKpPJqFky:lvv/Nv+kT7Clae1+SJqOy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48de6cfd6309a632c1ff1c901404e5c4

Files

48de6cfd6309a632c1ff1c901404e5c4
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 757KB - Virtual size: 756KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ