49ae4f03d14daf8f069d09650bb2f661 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49ae4f03d14daf8f069d09650bb2f661
Size

815KB
MD5

49ae4f03d14daf8f069d09650bb2f661
SHA1

14ca4cc9a79a9a176bc3bdb7573811c1e86781f4
SHA256

e829a6acb61b6d350252856c591b92e85b6a6fd7befa1b1114016e6797623276
SHA512

736032647e83ffbe91c29c2ae3f07be53e739e128f436fac219e981a1a41119d9f3a9d2c0d5491833c7c81fa17d804817e06874e88b3ecb508c7a358e75b0926
SSDEEP

12288:jJvaG3u5+94MH6auofczn+evZkd5ANw+dyXSnxJMEi5LYXtyPgM5tz2We:Vi+BaauowbOAxycxiT50X4f+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49ae4f03d14daf8f069d09650bb2f661

Files

49ae4f03d14daf8f069d09650bb2f661
.exe windows:4 windows x86 arch:x86

48c082acc1fce72c743ccab0b5a9e034

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
CloseHandle
GetACP
FindClose
GetConsoleCP
FindAtomA
CreateMutexA
LocalFree
SignalObjectAndWait
LoadLibraryExW
GlobalUnlock
GetLastError
Sleep
GlobalLock
HeapCreate
CreateFileMappingA
TlsGetValue
ExitProcess
CreateFileA
GetModuleHandleA

user32

IsWindow
GetDlgItem
DispatchMessageA
CheckRadioButton
CallWindowProcA
GetFocus
DrawFrame
FillRect
DrawEdge
GetIconInfo
DefWindowProcW
CopyRect
GetDC
MessageBoxA

uxtheme

DrawThemeEdge
DrawThemeIcon
GetThemeSysInt
DrawThemeText
GetThemeRect

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ