49b85e882861c635c91be1d08a8cae41 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49b85e882861c635c91be1d08a8cae41
Size

32KB
MD5

49b85e882861c635c91be1d08a8cae41
SHA1

5534c6d6eb69cbbbbfd54962b3070bac9c21037e
SHA256

9211860591b0026ff5c1f7397d6735a5e175e5bdc92ce1378c0696793a0c5acd
SHA512

d28179b39e08849ca37479095d8ed1e296e32035e2b00be8ed60bf3402736c8818cabac5c002de32d22e306e1a7f4cf9d82cf63b4a6594cbccf3c36a9a30f1fe
SSDEEP

768:bP7Rlw6/HdK4XiiixTq9P2NOUZjQKBrXokiI:bzRu2NXLiRa2N3QwXjn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49b85e882861c635c91be1d08a8cae41

Files

49b85e882861c635c91be1d08a8cae41
.exe windows:4 windows x86 arch:x86

5f43e465ea959cc392438ea57387237a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxW
GetKeyboardState
GetWindowContextHelpId
DrawIconEx
keybd_event
ActivateKeyboardLayout
GetAltTabInfoA
ReasonCodeNeedsComment

kernel32

GetLastError
VirtualProtect
DisconnectNamedPipe
AreFileApisANSI
SetHandleInformation
HeapLock
WriteFileEx
CreateFileMappingW
NlsConvertIntegerToString

gdi32

DdEntry40
UnrealizeObject
GetLogColorSpaceW
GetDeviceCaps
GetFontLanguageInfo
CreateBitmap
CreateCompatibleDC

Sections

.text
Size: 4KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE