49d33a67f1f597521981038e0422ca73 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49d33a67f1f597521981038e0422ca73
Size

63KB
MD5

49d33a67f1f597521981038e0422ca73
SHA1

20ce73689836731071f8898f78b3f91e1dd0c976
SHA256

160124d7bc3a0e05fc01b97a780a6f3e0110b351d2c921ec4d9bd10848ad52dc
SHA512

a4c356e4f313a067e3632c63b14048d44eefbb2c23dddd6fe567b30fdcc7865d228d61b4871c4b3f4edb3c91ced785f484ef30210507b8db036bc97f3289683c
SSDEEP

1536:hTjLYKP3nSmSxv2GJ6h6N3saoc+Y/3DiySG832yxgNXn6iQOOrjxyzrB:z6N8bc+Y7gG8GsgJf+urB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49d33a67f1f597521981038e0422ca73

Files

49d33a67f1f597521981038e0422ca73
.exe windows:4 windows x86 arch:x86

ad7da6f2c1f8630554dba263995564ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateSocketHandle
GetEnvironmentVariableW
UnlockFile
GetStringTypeW
SetConsoleDisplayMode
ReadConsoleOutputCharacterA
GetQueuedCompletionStatus
GetDllDirectoryW
GetNamedPipeInfo
RequestWakeupLatency

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE