49a6cfae51afaef3fa546d0f4682f776 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49a6cfae51afaef3fa546d0f4682f776
Size

34KB
MD5

49a6cfae51afaef3fa546d0f4682f776
SHA1

9d16ab18f0fcd8bf4c3eecef1d6ea21757b0f134
SHA256

5bfc7d7e591bd1d94845c27eade61156d7dc81125907f8d572677bab3914075d
SHA512

827896b971e9947f2ead05bac98ba78fc470ce104fcee7c1352ee6fcc34b3931fd398dd12100a97f12baca1def07f7b4136f1003ca4f7e09d85d9db75a6f4969
SSDEEP

768:72w+n0yV4MaFxlkyQfgL/EaGdxIdiOPzvoO:qfnSZkyQfm/sHavj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49a6cfae51afaef3fa546d0f4682f776

Files

49a6cfae51afaef3fa546d0f4682f776
.dll windows:4 windows x86 arch:x86

a342e0986fdb5733d4da5345bdafe5d7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CreatePopupMenu
DeleteMenu
EnableScrollBar
EndPaint
EqualRect
FillRect
GetCursor
GetDC
GetDlgItem
CreateIconFromResource
IsCharLowerA
LoadBitmapA
OemToCharBuffA
RegisterClassA
SetCursor
ShowCursor
ShowOwnedPopups
ShowScrollBar
CreateDesktopW
CopyRect
CharUpperA
CharToOemA
CharPrevA
CharNextA
GetFocus
ChangeMenuA

kernel32

lstrcpynA
lstrcmpA
SetEndOfFile
SetCurrentDirectoryA
GetDateFormatA
ExitProcess
lstrlenA

Sections

.text
Size: 18KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE