49158844852b24e0184539c9c26c7fa2

General

Target

49158844852b24e0184539c9c26c7fa2
Size

43KB
MD5

49158844852b24e0184539c9c26c7fa2
SHA1

517403d2ce2d6879c758536076b0d70044f8a378
SHA256

a0422cc3e8c1fd28f350e8e233d7a62aa1b7bb3429e639622508fe577d574927
SHA512

609afc820325f978208ad00972577358e71d23712df664ad3455e49a842092a20f366c99f5a494ca4a0c530676ab3635e2cf7776d59523cc122c6d5e6a49320f
SSDEEP

768:t7uenkpXG7bHJ+Dc+pQfyf8DaQnamoDJfSJNyoaRvoFN+cAAOAl8bTedyFg+YgO1:t1nkpW7Ao+pQfyqQf6uVoGJ48bOyF0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49158844852b24e0184539c9c26c7fa2

Files

49158844852b24e0184539c9c26c7fa2
.exe windows:4 windows x86 arch:x86

9a33e8dc558d3bfec1a40cffc931f592

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateNamedPipeA
EnumCalendarInfoW
EnumTimeFormatsA
ExitProcess
FindResourceExW
GetStartupInfoA
GetUserDefaultLangID
GlobalFindAtomA
GlobalFlags
GlobalSize
Heap32First
InterlockedExchange
LocalFileTimeToFileTime
OpenFile
PurgeComm
RequestDeviceWakeup
SetCommState
SetFileAttributesA
SetProcessAffinityMask
SetThreadLocale
TransmitCommChar
WriteFile
WriteFileEx

user32

BeginDeferWindowPos
DdeCreateDataHandle
DdeQueryNextServer
EnumPropsA
GetIconInfo
GetKeyNameTextW
GetMenu
GetMenuState
GetTabbedTextExtentA
GetWindowWord
IMPQueryIMEA
InvertRect
IsWindow
LoadAcceleratorsA
RegisterLogonProcess
SetDeskWallpaper
SetMessageExtraInfo
SetWindowLongW
SetWindowTextW
ShowCaret
TranslateMDISysAccel
UpdateWindow

gdi32

BitBlt
CopyEnhMetaFileW
CreatePolyPolygonRgn
CreateSolidBrush
DeviceCapabilitiesExA
Ellipse
EndDoc
EnumFontFamiliesA
ExtCreateRegion
ExtEscape
GetCharWidthFloatW
GetCharacterPlacementW
GetClipBox
GetMiterLimit
GetNearestColor
LPtoDP
LineTo
PolyTextOutW
Polygon
PtInRegion
RectInRegion
ResetDCW
SetDeviceGammaRamp
SetPolyFillMode
SetSystemPaletteUse
SetWorldTransform
TranslateCharsetInfo
UpdateICMRegKeyA

Sections

.text
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9a33e8dc558d3bfec1a40cffc931f592

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 512B - Virtual size: 12KB

.data Size: 41KB - Virtual size: 56KB

.rdata Size: - Virtual size: 4KB

.rsrc Size: - Virtual size: 8KB

.text
Size: 512B - Virtual size: 12KB

.data
Size: 41KB - Virtual size: 56KB

.rdata
Size: - Virtual size: 4KB

.rsrc
Size: - Virtual size: 8KB