49f01ac1aa70b2a867a8418564b5a65b | Triage

Sharing

General

Target

49f01ac1aa70b2a867a8418564b5a65b
Size

50KB
MD5

49f01ac1aa70b2a867a8418564b5a65b
SHA1

043622b1ff8972a2fcab925639ed4a33b93696a3
SHA256

62d29547982b596be385c9617836437ffa33255dea32a67e4874f1f91cbd3862
SHA512

bf3e5133c5c250f98de2667209216f35a5f478c61cfa5e42ee6af4b5b5f8534bebd5ba534f2e95eb12424874ec7baf5388315333176a893915d0f41c9ca0ec10
SSDEEP

768:DnWyBah5BGBcXgDgzKDvK/d9En2e7RxDXFlwZlXfCTrHLj6IgpFyJ:DnxUSaKG9E3RxTUZZfCfCoJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49f01ac1aa70b2a867a8418564b5a65b

Files

49f01ac1aa70b2a867a8418564b5a65b
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE