b48b448c9dafde2c680baec03a3b8bfec1b6241bab549a65c8e2ffd5fb32a05f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b48b448c9dafde2c680baec03a3b8bfec1b6241bab549a65c8e2ffd5fb32a05f
Size

8.8MB
MD5

f5118476d199862822e7be1c42e686c2
SHA1

8fdf90b1d6c3a2e0a07fbbc78a5bd1593a1f7a36
SHA256

b48b448c9dafde2c680baec03a3b8bfec1b6241bab549a65c8e2ffd5fb32a05f
SHA512

c1f3e60bed905e57f76d8b1d1fbcecd8af534fad1fb3baeee2e4531b09cd48afdb57aa79362e3689eafa9a2c26a03a442078afb1b55b474c600575d2920e6867
SSDEEP

196608:Az4yhQaIsXSe5ypuEoGSSJSG1fWwSgUfWsI+RicXoZ8vE/aKBmwzvu:Azt7XSgyp6GNJx1fSgUXiIoZ2ERBjz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b48b448c9dafde2c680baec03a3b8bfec1b6241bab549a65c8e2ffd5fb32a05f

Files

b48b448c9dafde2c680baec03a3b8bfec1b6241bab549a65c8e2ffd5fb32a05f
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 8.8MB - Virtual size: 9.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE