49c14a5d2100ec6b08300e41e3c62929 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49c14a5d2100ec6b08300e41e3c62929
Size

66KB
MD5

49c14a5d2100ec6b08300e41e3c62929
SHA1

727a0fe85e4fa6a61efb2621b0b820236b7a68d6
SHA256

4b2cb5212e7048d12c9bf7c4940bd255658f1fe37ffbb80e4abf18dd0d993cfb
SHA512

7fc1cf244bcff363677f14f42aa940d4846e2b9e42ef4565ef5d6cde53877b161c88ae964654f948036a8dffa492586d1e1d8e66570ee6a725b45c7732ef7bb8
SSDEEP

1536:MmfEto3/MRn8fXd96pfpUyAEWgWnv3COVlxxhJ97Oq:qCMh8/d9z/V9nvJVvX37Oq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49c14a5d2100ec6b08300e41e3c62929

Files

49c14a5d2100ec6b08300e41e3c62929
.dll windows:4 windows x86 arch:x86

7f8c6f960b9ce8a88e1576e81c6c16ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ConvertDefaultLocale
CreateEventA
FindFirstFileA
FreeResource
GetCurrentProcessId
GetFileSize
GetModuleHandleA
GetStartupInfoA
GetStringTypeA
GetSystemInfo
GetTickCount
GlobalReAlloc
HeapAlloc
HeapCreate
RaiseException
ResetEvent
SetEndOfFile
WaitForSingleObject
WriteFile
lstrcatA
lstrcmpA

user32

CheckMenuItem
ClientToScreen
GetCursorPos
GetMenuItemID
GetMessagePos
GetSubMenu
GetSysColorBrush
GetTopWindow
IsRectEmpty
ModifyMenuA
ScreenToClient
SetClipboardData
SetPropA

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ