48d41507f5fc40a310fcd9148b790c29aeb9458ff45f789d091a9af114f26f43 | Triage

Sharing

General

Target

48d41507f5fc40a310fcd9148b790c29aeb9458ff45f789d091a9af114f26f43
Size

5KB
MD5

1de6a5904b0331ed96ec71856dc0baa1
SHA1

cb04ff706de2c2334827e19721ec829e0bdb804e
SHA256

48d41507f5fc40a310fcd9148b790c29aeb9458ff45f789d091a9af114f26f43
SHA512

0500be78fd566d8bdb890f392f7ef2791fc596ba10f45b7fb591ec43e9613e36bdee1d518c9b8e4b2c9c1e5b2d7c6ace01c8dc03888e4d79be5add4a86328913
SSDEEP

48:a/KonMFlBGW8k3hqJxC2rx8mXK9lenyEdMQ50BbPaR9ekTpeB+7zC7HZmYHPPOo1:uK3xhWwWKUrr2bSREuog7e75tvPOoyn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48d41507f5fc40a310fcd9148b790c29aeb9458ff45f789d091a9af114f26f43

Files

48d41507f5fc40a310fcd9148b790c29aeb9458ff45f789d091a9af114f26f43
.exe windows:4 windows x86 arch:x86

1784e6f551da2baf7ae76798e5a89d89

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
SetFilePointer
CreateFileW
WideCharToMultiByte
GetLocalTime
MultiByteToWideChar
ReadFile
Sleep
CreateProcessW

user32

wsprintfW

netapi32

NetApiBufferFree
NetSessionEnum

msvcrt

_controlfp
_except_handler3
wcscpy
??2@YAPAXI@Z
vsprintf
wprintf
printf
wcscmp
_exit
_XcptFilter
exit
__p___winitenv
__wgetmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_wcsicmp

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 946B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE