48f717bca8979a32a21d705b0bb50447

General

Target

48f717bca8979a32a21d705b0bb50447
Size

60KB
MD5

48f717bca8979a32a21d705b0bb50447
SHA1

8de1911ce04cfeefa4777f912dce1da2dafffb24
SHA256

e4c286bd89c9ca0bd4429034dd9d245ea5bb4cf32a7fefb32c756961f68134b0
SHA512

c6fcc1384508d704df827aec5a01424854768115da2395eedb601758fdcc01a0b0c9491303d47a2ff381baa8cd90e1ca701b6de108c4077a8273824ec0a3a94a
SSDEEP

768:OQZxiLYS6imww+iVDRTv8sgoEmTyxoxH5aA5IK7kE3B2Nk:OQ/qPdihRQqEToxZaA5Unk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48f717bca8979a32a21d705b0bb50447

Files

48f717bca8979a32a21d705b0bb50447
.exe windows:4 windows x86 arch:x86

93560fda196bb6204a58adcfffc75808

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDefaultLCID
CloseHandle
DisconnectNamedPipe
CreateFileA
WriteFile
ConnectNamedPipe
GetFullPathNameA
Sleep
CreateThread
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
FreeResource
FlushFileBuffers
SizeofResource
LockResource
LoadResource
FindResourceA
DeleteFileA
GetModuleHandleA
GetModuleFileNameA
GetCurrentProcess
GetSystemDirectoryA
UnmapViewOfFile
GetFileSize
ExitProcess
CreateMutexA
GetVersionExA
IsBadReadPtr
GetLastError
GetSystemInfo
LoadLibraryA
GetWindowsDirectoryA
GetProcAddress
SetFilePointer
GetStartupInfoA

advapi32

RegCreateKeyExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumValueA
RegSetValueExA
RegCloseKey
RegOpenKeyExA

winmm

mixerGetLineInfoA
mixerSetControlDetails
mixerOpen
mixerClose
mixerGetLineControlsA
mixerGetControlDetailsA

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
??3@YAXPAX@Z
sprintf
??2@YAPAXI@Z
__CxxFrameHandler
free
_except_handler3
calloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93560fda196bb6204a58adcfffc75808

Headers

File Characteristics

Imports

kernel32

advapi32

winmm

msvcrt

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 36KB - Virtual size: 32KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 36KB - Virtual size: 32KB