49b15badadc91e13ecc03cf1614c979d | Triage

Sharing

General

Target

49b15badadc91e13ecc03cf1614c979d
Size

63KB
MD5

49b15badadc91e13ecc03cf1614c979d
SHA1

ef668bfad04b57802d93053ff3807969c736bac6
SHA256

29c92fc604e0157fe2c5957393b6897d4165cb65aa2502b1ec76bacd304a103e
SHA512

a7044a7598b8f687e7392b5959f0b5356e5d8470a7088cda3146f203d89c9f73950dbdabb13c2085dff1529a19acc5397fb75e5720bfd22b9d79c39df1a0c959
SSDEEP

1536:1Ufiw+85C2be+NoYUFrIuFnE5hn0i22AfJlP:m6w+UCejNoYUFrIuFwWjRlP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49b15badadc91e13ecc03cf1614c979d

Files

49b15badadc91e13ecc03cf1614c979d
.exe windows:4 windows x86 arch:x86

d7c3c9382b43e5478a56ea7d42452cdb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ