48dfadb9f24f2d696c761c0f06682e34ac4459dfb632609fedf9aaba0b383788[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48dfadb9f24f2d696c761c0f06682e34ac4459dfb632609fedf9aaba0b383788.exe
Size

63KB
MD5

59589e3fee80ba6013ae8d736651618a
SHA1

b6e16ff09423a9dfc885fe0c7ad6973c16a4affe
SHA256

48dfadb9f24f2d696c761c0f06682e34ac4459dfb632609fedf9aaba0b383788
SHA512

d872af1e737d68e810ed21d4b154dd5cf74234736f4c3ef706d87dfb2c226ec9251c7b930a38d9df5f0e12ccd0c8f7e4d712613d9847b30cf4380af080af6eec
SSDEEP

1536:93tIYG0mB/EXUj8mm1fhMrjEakcD066cqCeGWPUs:92Ydw1R2GA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48dfadb9f24f2d696c761c0f06682e34ac4459dfb632609fedf9aaba0b383788.exe

Files

48dfadb9f24f2d696c761c0f06682e34ac4459dfb632609fedf9aaba0b383788.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\super\source\repos\Laucher\Laucher\obj\Debug\Laucher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ