48057b1f7a465a5a1b23e3756f397efb6e72e5d2e3fefc39cd2654a27a108c95 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48057b1f7a465a5a1b23e3756f397efb6e72e5d2e3fefc39cd2654a27a108c95
Size

120KB
MD5

980e5ec376c1e4bcc2fc3e34c12dcdf3
SHA1

0099abbae8d4c30388c6ebd80277289c9f1aed82
SHA256

48057b1f7a465a5a1b23e3756f397efb6e72e5d2e3fefc39cd2654a27a108c95
SHA512

d4099e6368d9d058f9ec7c9b257b370c3c12b0226bac5b179f321f5721d068d67a832410d26ff9c019b431f7eb1133d75d81e2c43aa1796139a413e53805d0a0
SSDEEP

3072:A/OubpZefUcIP9EqjolAy1qv8FX422jj2dS:8OuVZRcC9Eqj09C8FX4Ne

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48057b1f7a465a5a1b23e3756f397efb6e72e5d2e3fefc39cd2654a27a108c95

Files

48057b1f7a465a5a1b23e3756f397efb6e72e5d2e3fefc39cd2654a27a108c95
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ