48be13efc4ed41369814fe3b6c75eabcf6bafd4fdd6b23aef925475d023b6daa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48be13efc4ed41369814fe3b6c75eabcf6bafd4fdd6b23aef925475d023b6daa
Size

120KB
MD5

0b1aa6e39a8003c2dbd9280b0e946aba
SHA1

2068512b600beaa60ad47c2423d7321a61a18dce
SHA256

48be13efc4ed41369814fe3b6c75eabcf6bafd4fdd6b23aef925475d023b6daa
SHA512

343d044fd6a646ffae0e7bd29d14169461dbc4041f1a0e5657fb09a88ae7e73fa1c6a88305a4d68bf731dd087373d0bb2592c3a0d0c45b6d4f0931485f53c747
SSDEEP

3072:8FE0415DSsJDmU6Jq0Fq3nIBQchk6X3pqcffJlecj11:8FkXesJDmnmnIBQcTYyH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48be13efc4ed41369814fe3b6c75eabcf6bafd4fdd6b23aef925475d023b6daa

Files

48be13efc4ed41369814fe3b6c75eabcf6bafd4fdd6b23aef925475d023b6daa
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ