048c974d67ba2871a9e1bdaf055fe920N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

048c974d67ba2871a9e1bdaf055fe920N.exe
Size

63KB
MD5

048c974d67ba2871a9e1bdaf055fe920
SHA1

7a6f50560f2aa3dde43f3c04cc694af3196e2674
SHA256

85f5f0ec7fae11f798de60542015f817f6950c96c5ad57550341a00f12c1d862
SHA512

ead74c3a27aa097bb1f7f384c1b8a938061ab561fee84a7b071b3e0709ab342be24fc5474c33e54e1652bc309542b5bdd1fdba705691f60c918230c3cf563989
SSDEEP

1536:gJ+dtTuIbKRJyDcMdORidttOKN0Ri5GsWVemJEzbbtf:q+SIbhDfb1OkuikTemJOJf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
048c974d67ba2871a9e1bdaf055fe920N.exe

Files

048c974d67ba2871a9e1bdaf055fe920N.exe
.exe windows:4 windows x86 arch:x86

3fff288bb1ed5b110390527021172598

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DecodePointer
SetNamedPipeHandleState
K32GetMappedFileNameW
GetExpandedNameW
SetFirmwareEnvironmentVariableExA
SetProcessDefaultCpuSets
GetComputerNameExA
Process32Next
EnumCalendarInfoA
BuildCommDCBW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE