48f06a36e28a0d0d1e3ad15eeae386759b7605b5a1a87a0e3b548e840a273a38 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48f06a36e28a0d0d1e3ad15eeae386759b7605b5a1a87a0e3b548e840a273a38
Size

63KB
MD5

d7b550f240cbd9a97b20fd952a384e45
SHA1

cc8919cb8140f50af7b6119c83d81655c1bf5eb7
SHA256

48f06a36e28a0d0d1e3ad15eeae386759b7605b5a1a87a0e3b548e840a273a38
SHA512

5817e013076680e0bb9859d2b7f12d1f290edfc0f4977301bddad57fcd88e407d0c9b1de2b4757706bdb56e7e78cced3451d71a6407c41d72ba773d7bd330f4a
SSDEEP

1536:Tvj34dUAHl0+AWSHWfA8B3XGFn3Vn5cjDyZaUeYP0sPz:Tvj34d7lSHQXEnh+mvP0sPz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48f06a36e28a0d0d1e3ad15eeae386759b7605b5a1a87a0e3b548e840a273a38

Files

48f06a36e28a0d0d1e3ad15eeae386759b7605b5a1a87a0e3b548e840a273a38
.exe windows:4 windows x86 arch:x86

bed5ec929a8f12ba935e3328fd34132a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

NeedCurrentDirectoryForExePathA
WriteConsoleInputA
SetProcessMitigationPolicy
DeleteTimerQueueTimer
IdnToUnicode
Wow64RevertWow64FsRedirection
timeGetTime
UnlockFileEx
BaseGenerateAppCompatData
BaseUpdateAppcompatCache

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE