49b7dddc44359640d442e794cb4bfa5d | Triage

Sharing

General

Target

49b7dddc44359640d442e794cb4bfa5d
Size

71KB
MD5

49b7dddc44359640d442e794cb4bfa5d
SHA1

35ad848c8bb77f701af28b017d49864f18502a55
SHA256

27dc6082ace7acbc0631b0ca14b260e96c456d096304f1b45a1b70e5027f5a1d
SHA512

9df2fa10803a500912b6b9ce890468e8db7a6c63bd1561d6da515fadb815e34906ce171b1cb39c8a7f71e2be5182f755bbc05e65732ce0c5e83065a0224f3f07
SSDEEP

1536:pqwfEJyRSdX4Iii+3BEpr1RbvFzDHkUq1BkvNf1BnJNP7a:/eBZDUEZlDHkUq1BkvNf1Nja

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49b7dddc44359640d442e794cb4bfa5d

Files

49b7dddc44359640d442e794cb4bfa5d
.exe windows:4 windows x86 arch:x86

ca1d843241c7156a7c5ab0875b27c06d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

NlsConvertIntegerToString
GetVolumeNameForVolumeMountPointW
SetProcessAffinityMask
GenerateConsoleCtrlEvent
GetSystemWindowsDirectoryW
VerLanguageNameA
GetFileSizeEx
ConvertDefaultLocale
OpenFileMappingW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xrdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE