48af70db140523739825818f7972f210N[.]exe | Triage

Sharing

General

Target

48af70db140523739825818f7972f210N.exe
Size

179KB
MD5

48af70db140523739825818f7972f210
SHA1

1325f891fc76d501458bfcf1e3a85db5f6545626
SHA256

96af28f0d18393bd141978b64b6d4f08be4638fac963c7fb06912ee4ed29efdb
SHA512

d53e4a631a060d1fe9ad8bbd6992ece8d5dc509d47ac54b76e6d230240b9bcf10571b577db7bad66d406b4c19f4362bf4d8ea7d8e3f63f3e4692282d4a278635
SSDEEP

3072:4dQ6cSLi9sjewv8hMOyXDFU7EhRcyb96xMaNwg9+AEKdxtcgQxYh:x61Li9E8aDYEh9bsjmgIAEK9FZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48af70db140523739825818f7972f210N.exe

Files

48af70db140523739825818f7972f210N.exe
.dll regsvr32 windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

DllRegisterServer

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ