49a561a6cf70b0e6cdd50326f36118ee4787e4b4136a330815bbd7036206da7b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49a561a6cf70b0e6cdd50326f36118ee4787e4b4136a330815bbd7036206da7b
Size

83KB
MD5

5757e8d51020bfb4e5e23e65407859a6
SHA1

75bfbec8ae1c40ee57582005a729735475fb1b2f
SHA256

49a561a6cf70b0e6cdd50326f36118ee4787e4b4136a330815bbd7036206da7b
SHA512

dda616cad9c6131dc26c31124c7cefe381cd51da08a31b5ca0524ac512d7015ae7c1bd8b0980c026ce47f4b8ef0cfd8f6a1a7e4b41f5dcf2bb07a3f8a8e5c1d1
SSDEEP

1536:3ggggcB2TWkd5FgMOtbTl2SzxiZixZOHsYXE2uPDak0PlpjVrs2ryrd1vUQuqwcW:3ggggcYTWyPgxJl7jyHsYXE2u77iHs2i

Score

N/A

Malware Config

Signatures

Files

49a561a6cf70b0e6cdd50326f36118ee4787e4b4136a330815bbd7036206da7b
.exe windows x86

273cbb8e78704ef29fbc13ab1a1357c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceTypesW
CreateRemoteThread
ExitThread
_llseek
CreateNlsSecurityDescriptor
WritePrivateProfileStructW
PrivCopyFileExW
GetUserDefaultLCID
GetConsoleDisplayMode
GetThreadLocale
WritePrivateProfileStringA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE