49aca6eccfbf26ad66ee93ef612f8a61

General

Target

49aca6eccfbf26ad66ee93ef612f8a61
Size

48KB
MD5

49aca6eccfbf26ad66ee93ef612f8a61
SHA1

277b07f58dc337e5a8dce1c8e453e5e99d759669
SHA256

e69493f2a35f07702e46a4a2a9e7c373b0fed538c4c59b16be740b21ea4fd62a
SHA512

e7d8497335f5564568cb1d707aafa5b6d61682ac542e0bdd2cd8bd750baad4fa12d8ab6c86a096edae0747c8c92af61650f9c09021f986f8899bbadbbaa4c60b
SSDEEP

768:0W2iURMTBKT2vsmXqZSNSukOe3kXEM1vr7E2fjoyTBpw17rd:U2o20mXq8NyMqhd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49aca6eccfbf26ad66ee93ef612f8a61

Files

49aca6eccfbf26ad66ee93ef612f8a61
.exe windows:4 windows x86 arch:x86

fd42a0784eae416a4f593ea7976719a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
ExitThread
FreeLibrary
GetCommandLineA
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetThreadPriority
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
ReadFile
ReadProcessMemory
ResetEvent
ResumeThread
SetEvent
SetFilePointer
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
WaitForSingleObject
WideCharToMultiByte
WriteFile

oleaut32

SysAllocStringLen
SysFreeString
SysReAllocStringLen

user32

CharLowerBuffW
CharUpperBuffW
MessageBoxA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stab
Size: 336B - Virtual size: 336B

IMAGE_SCN_MEM_DISCARDABLE

.stabstr
Size: 240B - Virtual size: 240B

IMAGE_SCN_MEM_DISCARDABLE

Sharing

General

Malware Config

Signatures

Files

fd42a0784eae416a4f593ea7976719a9

Headers

File Characteristics

Imports

kernel32

oleaut32

user32

Sections

.text Size: 23KB - Virtual size: 23KB

.data Size: 1KB - Virtual size: 1KB

.bss Size: - Virtual size: 8KB

.idata Size: 1KB - Virtual size: 1KB

.stab Size: 336B - Virtual size: 336B

.stabstr Size: 240B - Virtual size: 240B

.text
Size: 23KB - Virtual size: 23KB

.data
Size: 1KB - Virtual size: 1KB

.bss
Size: - Virtual size: 8KB

.idata
Size: 1KB - Virtual size: 1KB

.stab
Size: 336B - Virtual size: 336B

.stabstr
Size: 240B - Virtual size: 240B