48e70150d8e35f994af5c402bc977e79 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48e70150d8e35f994af5c402bc977e79
Size

153KB
MD5

48e70150d8e35f994af5c402bc977e79
SHA1

1544aa9cbcb3c0bb417eeca792411b095e55eec2
SHA256

f9af388cc11655763849229959e5e7d3339f2abe66e94b617c820d101220942c
SHA512

452b10a8aa9b1cb2ae01f5acafd0ced1c5100a7f747bdcea7cacb66aec6d565ee4f65c6d527ec6e1549a3d8b11f15675ad0fff46589ac56a8ada7ce4d1906b93
SSDEEP

3072:tyCRtRUdvb7yZsOXhl3oxBRNJWddF9twwQVwk6ifskfR+9xUuPlY:ECRIbHwWL3WddzeJwk6sskp+9KuPlY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48e70150d8e35f994af5c402bc977e79

Files

48e70150d8e35f994af5c402bc977e79
.exe windows:4 windows x86 arch:x86

9c2fe897ff9207ddcc74ee35f8b95f8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
FindWindowA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
AddAtomA

msvcrt

__getmainargs

urlmon

URLDownloadToFileA

Sections

.text
Size: 23KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE