49aa8bf69e57034bb6d7464694dc9a93 | Triage

Sharing

General

Target

49aa8bf69e57034bb6d7464694dc9a93
Size

97KB
MD5

49aa8bf69e57034bb6d7464694dc9a93
SHA1

9f08ec4a6b8b6c7ea64a9daba67d4d2eced6d7df
SHA256

e795c74eaf333d649fc12e7b2139b3a48713c25c3973b904d34c61133ba0b805
SHA512

3234422cab4bc11782f24a456d567ab9c1245a31e52f260b69cadf389a7c87018ce0892ffa5498a63ddb7b3277cab215417634a516eb4fb85dc30a049bfe3bdd
SSDEEP

3072:d3tngVV1o67cFI4rBnIWONtvtj/QVSjB/s6Wj:d3tg5cFI49If/j/ls6g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49aa8bf69e57034bb6d7464694dc9a93

Files

49aa8bf69e57034bb6d7464694dc9a93
.exe windows:5 windows x86 arch:x86

b97c1be425f474ccc2ed58aa8c49ce9f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetEnvironmentStringsA
FileTimeToSystemTime
GetDriveTypeA
GetSystemTimes
GetLongPathNameW
IsBadHugeReadPtr
GetCommandLineA
VirtualAllocEx
GlobalAddAtomA
GetSystemTimeAsFileTime
GetWindowsDirectoryA
EnumUILanguagesA
GetFileSize
GetDiskFreeSpaceA

user32

RealGetWindowClassA
GetWindow
SendMessageCallbackA
LoadBitmapA
ExcludeUpdateRgn
PostQuitMessage
EnumChildWindows
ChangeClipboardChain
SystemParametersInfoA
SetCursor
PeekMessageA
AlignRects
UnhookWindowsHook
UnregisterMessagePumpHook
GetPriorityClipboardFormat
LoadMenuA
RealGetWindowClass
FlashWindow
SetCursorPos
RegisterTasklist

gdi32

SetAbortProc

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ