49cf4db0c078a8cd1a1571d70423f765 | Triage

Sharing

General

Target

49cf4db0c078a8cd1a1571d70423f765
Size

51KB
MD5

49cf4db0c078a8cd1a1571d70423f765
SHA1

c081699fd317c29f5e700df0a8b988d1e43b0a4a
SHA256

cf23d212a8e598a131f39f8cde3ef9a179f06a124ab3bc73ea4aaafc8767d4c7
SHA512

ae0d0ffe1726e1c86bb23add0cd977f651ec7854f163d5ee703142b546a988a25eee2c722bf4da51d8f8a2d62ba0e82b78f8b7947ef2a6d3c9874dee67688ffa
SSDEEP

768:yQ+kV9fyEeLAFPMt/JkeQtnEFm2s0quFs4XLO70DXxrbrx5Tfv6wo+3o0Rmz:nD5ekdMtiRnYm3vuF97k0zLN67+3ob

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49cf4db0c078a8cd1a1571d70423f765

Files

49cf4db0c078a8cd1a1571d70423f765
.dll windows:5 windows x86 arch:x86

09c697eea3eafbf9128b38096d298481

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

UrlCombineW
UrlCreateFromPathA

user32

MessageBoxW
TranslateMessage
DispatchMessageW
GetDC
SendMessageA
MessageBeep
DialogBoxIndirectParamA

Sections

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Y
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ