7c48d5bd203d28fe107576d663d8b582 | Triage

Sharing

General

Target

7c48d5bd203d28fe107576d663d8b582
Size

169KB
MD5

7c48d5bd203d28fe107576d663d8b582
SHA1

a9826587b5e9cd6aa36709c21e9a0a88ca21a10c
SHA256

12ef7db4a1693852a81aa604a5e0b097a5df436a6465722d272da383f488b6f3
SHA512

8e2b026a3d1c91435b0d94c46cecf1e93800e25bf3a426f55ca95ea09e7e96c4a79f506ee88ca015fb197af1621634633de8ba5e228476cd33c424a67932d7a8
SSDEEP

3072:AeiAr9QwDgi5ht0fIIuD2SplDgFqGfBUFr/1XKAUIMWwcvgm7wN:AeiAFht0QliQlDfMsNKAUIguvwN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c48d5bd203d28fe107576d663d8b582

Files

7c48d5bd203d28fe107576d663d8b582
.exe windows:4 windows x86 arch:x86

030c6e74adfdc52ab01e52b8360d1bf4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memcpy
_CIcosh
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
HeapReAlloc
HeapAlloc
HeapFree

user32

CallWindowProcA

wsock32

closesocket
WSACleanup
WSAStartup

Sections

.code
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ