49fcc213655cd13b7dc73e3e2ad9ce72 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49fcc213655cd13b7dc73e3e2ad9ce72
Size

39KB
MD5

49fcc213655cd13b7dc73e3e2ad9ce72
SHA1

4d90ded0ca074e1752655e1c2f941771054f1e9b
SHA256

c1b4994312724c159c1f3602dddb29b106828da71392140bd41455bbdbcb5a5d
SHA512

02b6dd9a8965cc9489afcd5fa1119b6214de93799cfbac07f8f8ba5f3b143ea8af5c51d9bee1e43e069f8c124ffd56cf5bb8dc3ab684972b12f2abe280752fde
SSDEEP

768:Jsn1RTSv/ocXnZi4uTUZmRp2a29NS3yT8o+xNBk+pNbX4+IDHtVMsy6ld/DfrEUg:qn1tSv/oOc4uTUUpNONQygxFk+/bIPHE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49fcc213655cd13b7dc73e3e2ad9ce72

Files

49fcc213655cd13b7dc73e3e2ad9ce72
.exe windows:4 windows x86 arch:x86

319267b378d8f536c02bbe510b0a6f2a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
HeapAlloc
lstrcatA
LoadLibraryA
GetProcessHeap
WaitForSingleObject

user32

KillTimer
SendMessageA

gdi32

SetTextJustification

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 362B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ