49c2e41afdd0e9850cdc5ff79feef634 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49c2e41afdd0e9850cdc5ff79feef634
Size

14KB
MD5

49c2e41afdd0e9850cdc5ff79feef634
SHA1

a5cb2d46a0cacc9f51d617278789a07c61a29ac2
SHA256

db20d3e9e2880eaad38ad494c57195349f4ca23b9f8fad1167d4e099d7b4f8ce
SHA512

358764b2545e825422b1c3e9d6543401af624502e3686c420a825f8b5199163eeaaf6ddbd5a562548256c6a65bb598d7ffb73f032453e1e0e3060da5bb60896e
SSDEEP

192:eUwTn8ixvJs2ypsECQ1Jj2qDXAM3TiwuWbN1ueLdfWZgtwvkjxH:vydxexps+1JhLp3XbDBOg7B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49c2e41afdd0e9850cdc5ff79feef634

Files

49c2e41afdd0e9850cdc5ff79feef634
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

Size: 8KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE