b48f69b9304daab2ae3b0eafdf461dba8ab96d15053090d58c37a0fcf3f4598d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b48f69b9304daab2ae3b0eafdf461dba8ab96d15053090d58c37a0fcf3f4598d
Size

119KB
MD5

90ad93a197ca39eafd7619bf1a192e4c
SHA1

2c7554adcb68677998fb0c02909fd062fdcad547
SHA256

b48f69b9304daab2ae3b0eafdf461dba8ab96d15053090d58c37a0fcf3f4598d
SHA512

249212a32f1ca7e86f35107b7fae9f279cfc34b0f7f7bed917edae5beb437909096c8d65e5f84a3f0c5991298b1daf9b51ca2d6e8e20f790faa0bca396151e7e
SSDEEP

3072:u44xwL4vi1jHTEUQITmFCj4voP2hKqlDh:u+vjIUQIT2uAy2hRDh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b48f69b9304daab2ae3b0eafdf461dba8ab96d15053090d58c37a0fcf3f4598d

Files

b48f69b9304daab2ae3b0eafdf461dba8ab96d15053090d58c37a0fcf3f4598d
.exe windows:4 windows x86 arch:x86

6257b98d1d43784c6aa7ca5ed63a8c4d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleIcon
SetThreadDescription
GetNextVDMCommand
GetConsoleCP
IsEnclaveTypeSupported
GlobalUnlock
GetThreadId
CopyFileA
FileTimeToDosDateTime
BasepInitAppCompatData
SuspendThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE