c48c93c58e5b0a620c395c568b3b2c22 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c48c93c58e5b0a620c395c568b3b2c22
Size

76KB
MD5

c48c93c58e5b0a620c395c568b3b2c22
SHA1

adedace56add72b4b69414de713c742e79dbc205
SHA256

b5b29dc95eaa5cc0f484c7e1f987570a4374e8f73063ffa54715de158e963310
SHA512

c7066fe56c31cab7cd44778d019502b67cae8b4e1b84ae5d77e2b25cd6b0d9a0972aeb3c6e5cdb4c9d858775180d3a2879bb320af718918719eaa4f9782c987b
SSDEEP

1536:zMn75NeVv2yS9quXay8tmz9+Z0Ua+H4Gip8jPUpjVrs2ryrd1vUQuq6:iNOI9qVrm4fag1iUUHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c48c93c58e5b0a620c395c568b3b2c22

Files

c48c93c58e5b0a620c395c568b3b2c22
.exe windows:4 windows x86 arch:x86

7ca2454fe6b8c8ddc303d612c2f536d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetComputerNameExW
FreeLibraryAndExitThread
SetConsoleCommandHistoryMode
GetGeoInfoW
SignalObjectAndWait
DebugSetProcessKillOnExit
GetProfileStringW
WriteConsoleA
SetTermsrvAppInstallMode
WriteProfileSectionW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE