48dfc4f0d85cd699641ca4b1cbf98305 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48dfc4f0d85cd699641ca4b1cbf98305
Size

184KB
MD5

48dfc4f0d85cd699641ca4b1cbf98305
SHA1

d64e29140e6b24eb34f95e253ef451d18e86bb0f
SHA256

e197134ebc19cdd4f12e2fa373bdfa6f4eb17dd58c15383ea4d5050fc66c655f
SHA512

48206c4d981a30d033e6acedcbf24cefabb520d947df853f50aeb548c6bd4242807b0d4209bc2fe7e838d611702198617603f44d8ec0ff276419b643d809cd1b
SSDEEP

3072:siHX3xl7QfyrsazClgvzbwUosoBy+mvKVEm+0h+hgvC3BBfD7Y0ctsfd9D:Zn7QKrElcwjwhgvqBKsX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48dfc4f0d85cd699641ca4b1cbf98305

Files

48dfc4f0d85cd699641ca4b1cbf98305
.exe windows:4 windows x86 arch:x86

6bacabb7a4dc06885b1d9cced6a81e14

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

ws2_32

gethostbyaddr

winmm

timeBeginPeriod

comctl32

InitCommonControlsEx

user32

EnableWindow

gdi32

SetBkColor

advapi32

RegDeleteKeyA

ole32

CoCreateInstance

oleaut32

OleLoadPicture

Sections

.text
Size: 151KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE