49251ffe9ab4d1a7f826ca9de684fe6e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49251ffe9ab4d1a7f826ca9de684fe6e
Size

142KB
MD5

49251ffe9ab4d1a7f826ca9de684fe6e
SHA1

26f985412ffdd1d1758d9be032111458f30909f2
SHA256

b2bd8cda8754379523581041fd0815ad4b163094c148d5464da5a3975ac55001
SHA512

512d36965461c451a2925463c64d5b52d1179f5e387c4ef6b3c6a24e13153864647de86978eef88b0c02985952b2a70f1c5a729602c30ace3c8ff22fa180df61
SSDEEP

1536:aaqR4ON/tQi99rtuUXKIs4/18bz/uf3YTpIPzo6TtxY9UzGbreOTeY+TGx7Wac/D:a2i99xNKkOzyIT2PzfTyRSO5+Tyiac

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49251ffe9ab4d1a7f826ca9de684fe6e

Files

49251ffe9ab4d1a7f826ca9de684fe6e
.exe windows:4 windows x86 arch:x86

65b6862e9898b195f4ef7a1685fd82dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

memset

comctl32

InitCommonControls

user32

MessageBoxA

shell32

ShellExecuteExA

ole32

CoInitialize

Sections

.
Size: 7KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE