49d82cd9caaa9f75f677f23d19f5103b | Triage

Sharing

General

Target

49d82cd9caaa9f75f677f23d19f5103b
Size

172KB
MD5

49d82cd9caaa9f75f677f23d19f5103b
SHA1

b84b4e4146fbf19b6860a4821fb4a447ccdeeba2
SHA256

09c5ec33481d1c8d768ad3b8cb3cce8a359cac67869a739983f6c80b09831429
SHA512

827382425e9c887f6bdc6c623ee9101d109986e1772f88bb2b1bbd12cdf3221280709066030de3e44c26323c34f557a22a4623c8d50dd4f5eab0a8a11b44c273
SSDEEP

3072:Mk7kj4o2oTTriQfbnC2t9Yuo4etSErOddX0ByuCEEd1fpUe1Jh1tsL78I+tZwROR:MskjN2gKqzC2t9A4BEaXDd9pT1Jh1tcM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49d82cd9caaa9f75f677f23d19f5103b

Files

49d82cd9caaa9f75f677f23d19f5103b
.exe windows:4 windows x86 arch:x86

4efc2d3e673738b5817f6cc5819957f6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetModuleHandleA
FlushInstructionCache
VirtualProtect
GetTickCount
GetLastError
GetProcAddress
LoadLibraryA
Sleep
LocalFree
LocalAlloc
VirtualProtect

user32

wsprintfA

Sections

K&jSW*.!
Size: - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

<P.RI/+o
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gsqV<uiI
Size: - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5Ikh)s<5
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

U93j+kx2
Size: 168KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE