49a70d3437724bd70e25e097f8ea80fd

General

Target
49a70d3437724bd70e25e097f8ea80fd
Size 450KB
Sample240107-wdq8vsbefp
SHA256 2a77ae43cff20befca76b49de3665a059eadb01dd0a15cadd69eab65c2a7f491
MD5 49a70d3437724bd70e25e097f8ea80fd
SHA1 0f467a5bed2642302bb81f43d5fa825b0c72e402
SHA512 0f8a0652a19aba5d4df32b2f7532d0a5952ef21d9f885a619df6de8e05dec3cbeec78df2e8e270d4d460bb3bb6798e522f64dbfd9ba439d034670ae4a8188b45
SSDEEP 6144:x8aTDnsEzuiercYKh5GpMGDgnbGSA165LRHqliBAaXlYwyntuq89b+aQ:TzRzuiercYKq+GDgrACL9qsLqwFq06a
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49a70d3437724bd70e25e097f8ea80fd

File Explorer

49a70d3437724bd70e25e097f8ea80fd

.exe 450KB

49a70d3437724bd70e25e097f8ea80fd

IMPHASH ecacaa17efbbd9217675f45d4bba87dc
SHA256 2a77ae43cff20befca76b49de3665a059eadb01dd0a15cadd69eab65c2a7f491
MD5 49a70d3437724bd70e25e097f8ea80fd
SHA1 0f467a5bed2642302bb81f43d5fa825b0c72e402
SHA512 0f8a0652a19aba5d4df32b2f7532d0a5952ef21d9f885a619df6de8e05dec3cbeec78df2e8e270d4d460bb3bb6798e522f64dbfd9ba439d034670ae4a8188b45
SSDEEP 6144:x8aTDnsEzuiercYKh5GpMGDgnbGSA165LRHqliBAaXlYwyntuq89b+aQ:TzRzuiercYKq+GDgrACL9qsLqwFq06a
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

6368

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

UnregisterWait GetFileSize GetNativeSystemInfo SetFilePointer GetConsoleAliasesLengthW CopyFileExW SetLocalTime InterlockedIncrement InterlockedDecrement ZombifyActCtx CompareFileTime CreateDirectoryW SetConsoleScreenBufferSize WriteConsoleInputA SetComputerNameW FreeEnvironmentStringsA VirtualFree GetPrivateProfileStringW SetProcessPriorityBoost GetPriorityClass ActivateActCtx FindResourceExA LoadLibraryW GetConsoleAliasExesLengthW GetVersionExW InitAtomTable CreateSemaphoreA GetFileAttributesW GetBinaryTypeA EnumResourceNamesW CompareStringW lstrlenW GlobalUnlock InterlockedExchange GetStartupInfoA GetCPInfoExW OpenMutexW GetCurrentDirectoryW GetProcAddress CreateNamedPipeA WriteProfileSectionA ReadFileEx DisableThreadLibraryCalls ResetEvent LoadLibraryA GetConsoleScreenBufferInfo LocalAlloc SetCurrentDirectoryW PostQueuedCompletionStatus FindAtomA SetEnvironmentVariableA WriteProfileStringW FatalAppExitA GetCurrentThreadId TlsAlloc DeleteFileW LCMapStringW AreFileApisANSI GetOverlappedResult GetComputerNameA GetLastError MoveFileA GetCommandLineA HeapValidate IsBadReadPtr RaiseException EnterCriticalSection LeaveCriticalSection SetHandleCount GetStdHandle GetFileType DeleteCriticalSection TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleFileNameW GetACP GetOEMCP GetCPInfo IsValidCodePage TlsGetValue GetModuleHandleW TlsSetValue TlsFree SetLastError QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep ExitProcess GetModuleFileNameA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate HeapFree WriteFile HeapAlloc HeapSize HeapReAlloc VirtualAlloc RtlUnwind GetConsoleCP GetConsoleMode InitializeCriticalSectionAndSpinCount DebugBreak OutputDebugStringA WriteConsoleW OutputDebugStringW MultiByteToWideChar GetStringTypeA GetStringTypeW GetModuleHandleA LCMapStringA GetLocaleInfoA FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP CloseHandle CreateFileA

gdi32

GetBoundsRect

winhttp

WinHttpOpen

Name

.text

Size

128KB

Virtual Size

127KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

36KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

181KB

Virtual Size

46.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

193B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

81KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

49a70d3437724bd70e25e097f8ea80fd

kernel32

gdi32

winhttp

generic