48e82fd9368299d3d4e9e522e710e46237f5ede224dd803d65e51a2d4f77f7d9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48e82fd9368299d3d4e9e522e710e46237f5ede224dd803d65e51a2d4f77f7d9
Size

24KB
MD5

513e6ed7a48e60b712de53b19a09a4c2
SHA1

b9190c8057fe07adfb8f605f51069479e09bdfc9
SHA256

48e82fd9368299d3d4e9e522e710e46237f5ede224dd803d65e51a2d4f77f7d9
SHA512

9db3fefc935e6a557ddef257f6235a56cee6b08463c81c3d6d6fd67d519b1d5879a358b57971fec348d46c6bfbf1707955f97b7158c474c7624cb0a288e80296
SSDEEP

384:jIz4inmAXvK14dirr4tGjSz28MrHI0nTfSPt1rzMjkj8r6V+8Qc8mCrMxqEsj2ot:jIU8XvKadiQi8MLdbAt1QO8re1WmqHd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48e82fd9368299d3d4e9e522e710e46237f5ede224dd803d65e51a2d4f77f7d9

Files

48e82fd9368299d3d4e9e522e710e46237f5ede224dd803d65e51a2d4f77f7d9
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE