49952ebc4f4e081b57b0e60265c9dada | Triage

Sharing

General

Target

49952ebc4f4e081b57b0e60265c9dada
Size

15KB
MD5

49952ebc4f4e081b57b0e60265c9dada
SHA1

9f737fbb2f6b67a9e78ec92b3020f9dc7d27d59c
SHA256

c52a7d54d62ba6341062a487e643444190d1cc4b43ce2a5da8c237eecc8f4be4
SHA512

98386589cdb4feb2f5eade7d4c11ea41911c39d129090b9ada5f6a5da8a53c001389d286b5ceac7f2205880bd180b574c3820df9e2d4fcd5f081fb70a3200931
SSDEEP

192:tiXmokq888567KRnAUgy+HkC35Fhbsj80/QwAvm4MxZd5U6zmKkBH5:c2oWk7z9zVK80/b4uLwH5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49952ebc4f4e081b57b0e60265c9dada

Files

49952ebc4f4e081b57b0e60265c9dada
.exe windows:4 windows x86 arch:x86

67cc0c37d1beb4c7b795d92d2a3f964c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

user32

BeginPaint
CreateWindowExA
DefWindowProcA
DispatchMessageA
EndPaint
FindWindowA
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
MessageBoxA
PostQuitMessage
RegisterClassA
RegisterClassExA
SendMessageA
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ