49e430fc680c30a59affd332fef6a796 | Triage

Sharing

General

Target

49e430fc680c30a59affd332fef6a796
Size

90KB
MD5

49e430fc680c30a59affd332fef6a796
SHA1

9990d2eb806b9fd45bcc41afd8d6f876c72d5bdd
SHA256

7862667d0f6aa5bc6d1dc7e5945913daa07969608c2c2876f5884bbb309e47e9
SHA512

57275db64c8bdf928d4f799c4e81919b84881b9788400b625ab0a7ac1cee6edf84ff6c708055153ca43880954264bdaf8eb185ef07c08820a69e7f1d9fff4c0d
SSDEEP

1536:ju9on/GkSqaiWjrRIcN9wJhBdcpesiqC4xqCww0M4nQLiPKu5vP2Kitys/YQGt0:j3nepqkBIvddKXiqC4xh6KuZB+yBQGu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49e430fc680c30a59affd332fef6a796

Files

49e430fc680c30a59affd332fef6a796
.exe windows:4 windows x86 arch:x86

7e40aa241add0e92f1be99ae05e3b563

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
MessageBoxExA

wininet

InternetOpenA
FtpDeleteFileA
InternetSetOptionW

Sections

.text
Size: 65KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE