c48a9d101ff92948bf670c200abed437 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c48a9d101ff92948bf670c200abed437
Size

4KB
MD5

c48a9d101ff92948bf670c200abed437
SHA1

46fe9fc085e5e0d66c5e55b2ccdb55a0e0a46ddc
SHA256

f0b2ebb9e0601e187abed3a07fbec22785361fa0184d516032d4c811eb037751
SHA512

e63e510183d9f5aff9c7fc2927e4fb541f6d6d06fd123cc60e27543930c3f96b81b152b2085b4ca34526ad3be19298487ed33910d0119b94b3a583a91c165477
SSDEEP

48:Zvtrjh2O2XHya/TjqmKYQTOJ9dPfl3RJF2dhNAMoBAAP:Z13S3/rjDKdG9dPflhD2hcKA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c48a9d101ff92948bf670c200abed437

Files

c48a9d101ff92948bf670c200abed437
.exe windows:1 windows x86 arch:x86

aa57ab958c5dfd47adbac79d9c490f1f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ExitWindowsEx

kernel32

CloseHandle
CreateFileA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GetTempPathA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
ReadFile
Sleep
WriteFile
lstrcatA
lstrlenA

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegOpenKeyExA
RegSetValueExA

Sections

.data
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE