49ad0329560d85c6ac40daa2925482cb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49ad0329560d85c6ac40daa2925482cb
Size

3KB
MD5

49ad0329560d85c6ac40daa2925482cb
SHA1

b46727140550434745987b9fac5b2adc05855f28
SHA256

6c9993ff5d04db89a39570d7062c30b26153db58da8ce01a77f8fc8d84aa9457
SHA512

522637574a586d7a1182ad93dd6159a2c82469355a2f6a3e82c5dfd11e183868fc57f1beaa781bebac3b115179fb949b4b1a73c3e617515f020aa2ba01f22b83

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49ad0329560d85c6ac40daa2925482cb

Files

49ad0329560d85c6ac40daa2925482cb
.dll windows:4 windows x86 arch:x86

b6f391375d741ab65301de3824d105be

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
CreateMutexA
CreateProcessA
GetLastError
GetModuleFileNameA
ReleaseMutex
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 307B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 301B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ