48ea5f356b6d643c223c87fde635b110N[.]exe | Triage

Sharing

General

Target

48ea5f356b6d643c223c87fde635b110N.exe
Size

239KB
MD5

48ea5f356b6d643c223c87fde635b110
SHA1

635cc9955e5332e44a6d27ba83395a0b854427f3
SHA256

32f8677ced2181c0ce13dead8e1288568dcb991cd282abfc3211c1bca47721f8
SHA512

ecfbee8efa018ef1376468a7c356fe3c087012e91a209cc4da34dd791be051787e6d086323cc23078968533299668a05aaacfa0196d53d237c67d51becdf09e9
SSDEEP

6144:U7n94mRkppuWaq8I/K+Ktu1Dze6HDpLBzwRXED4yM0:UbjRYElSKtu1Dze6HDpLBzwRg4yM0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48ea5f356b6d643c223c87fde635b110N.exe

Files

48ea5f356b6d643c223c87fde635b110N.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ