49352ce017f6e3b7214d930790307ba6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49352ce017f6e3b7214d930790307ba6
Size

76KB
MD5

49352ce017f6e3b7214d930790307ba6
SHA1

db127f39c0f217f6de945285ddaf15ab5b8923ac
SHA256

2619ed4192ae9639cf27bee2eed73f6e259838e3396addc976c95c4d68daa66d
SHA512

f91c7a44121f76f7247c2fd8de6a2e0c68438ed86c50ac3e4af5db4a44e901f2015d5f50b54b7d80e3828c581116a56343807bd7b5784fa789f25c516898d060
SSDEEP

1536:jEcmwffzg3K3+JULAGGW7XdR/49qKWlhgVUrChvOkMsU/edhZKz/U85:4cdXzg36+JUwWJR/49Al2Ge1M5ekT5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49352ce017f6e3b7214d930790307ba6

Files

49352ce017f6e3b7214d930790307ba6
.exe windows:4 windows

b748fab43b2a0ecb3a9da49100b8df13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32NextW
_lcreat
Heap32Next
LZClose
UTRegister
OpenSemaphoreW
GetNextVDMCommand
LZCreateFileW
GetProcAddress
LoadResource
SetCommConfig
CreateSocketHandle
SetFileApisToANSI

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE