049eab6aee2b59c3b89ea8962b1c6dc1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

049eab6aee2b59c3b89ea8962b1c6dc1
Size

31KB
MD5

049eab6aee2b59c3b89ea8962b1c6dc1
SHA1

cb7257de3e4315486680e225a83545e167cfc5e9
SHA256

af1f5e2df3164c2e94faa3b770df67bd8614f90e636160cbd6dcc7fb8aba7b6f
SHA512

60faedc7c10da7df921efe6bea3a04205b4e92bbdef0a6f18b752744642f683d139775ca6635d90dcab547add07c35fdf50c5ed114956003cfe990df931bd79b
SSDEEP

384:ZZV9njd7TDHczUZLJxMUQsbk5t+lScTeiqFOOhUMDGULcrTL50FzpdFk/fVxVWt9:ZVh7TzTBziifTeiZOL7OTLeNfQfu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
049eab6aee2b59c3b89ea8962b1c6dc1

Files

049eab6aee2b59c3b89ea8962b1c6dc1
.exe windows:4 windows x86 arch:x86

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ