48e5a3d3aed3f168206132c80c020d38 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48e5a3d3aed3f168206132c80c020d38
Size

20KB
MD5

48e5a3d3aed3f168206132c80c020d38
SHA1

a79fc6ccfc4bf2333d342367667126a28584c967
SHA256

e3d53dfcfb9d7c5dbc050345dd65fbba5180689e783e69457d5e29566f2e026c
SHA512

dc0ecd00cdbbda9c1732499be6b0109f6c7a821c107bb266b94ae19adc48247731b27e7e1c3cf0ca42bd5394f233d69e2363a57ea93391916200492f43afd880
SSDEEP

384:zNCrzWQIYFXmXBuB8NS/YHbvOevF1q+11dDx+HogbJ:zkWnYAUBa3HjTJ6T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48e5a3d3aed3f168206132c80c020d38

Files

48e5a3d3aed3f168206132c80c020d38
.dll windows:4 windows x86 arch:x86

58abf1d6f0d0d841b2eb14c606effe94

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

DeviceIoControl
FreeLibrary
GlobalFree
LoadLibraryExA
GetLastError
GetProcAddress
GetModuleHandleA
CreateFileA
GlobalAlloc

Sections

.text
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 294B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 82B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ