49079646cb64c267ac7f44ca74cce0dd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49079646cb64c267ac7f44ca74cce0dd
Size

118KB
MD5

49079646cb64c267ac7f44ca74cce0dd
SHA1

b94fbac9e8576cb61210ce4315e2125686d879c8
SHA256

77eae28794b90df69900691960cda9496210b363fa9dd51a3857f1c790e10bc1
SHA512

4e4bd431ef9f0c2688aef6f51d0ffdb03c0c407253fb5e82ae19ba727dc13d7cb8d860bbd58c59c09b4771a43b24274fb5d8674b5c3486a7f480ee36604ac568
SSDEEP

1536:EUwV6bhhU26osnMOqN3EkNBwutaM6Io3FxO+R7UbG49Z3efFauLcYZJklYRRSXVK:EUsoX1BBHmxOYUbGyZT8ZYt4Gc3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49079646cb64c267ac7f44ca74cce0dd

Files

49079646cb64c267ac7f44ca74cce0dd
.exe windows:4 windows x86 arch:x86

249b0d5016492a44b0bf2b5af11393db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

DrawStatusTextW
DllInstall
ImageList_GetImageRect
ImageList_SetFilter
ImageList_DrawEx
InitializeFlatSB

kernel32

GetCommandLineA
ExitProcess
CloseHandle
CreateFileA
CreateThread

Sections

.text
Size: 68KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE