49c40971370b4920c4c51fbc7f3636d1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49c40971370b4920c4c51fbc7f3636d1
Size

54KB
MD5

49c40971370b4920c4c51fbc7f3636d1
SHA1

3f501e66a15d579176f21d6980018cc21ac1c216
SHA256

901cd98237e435a5215d021a63d22f722f4b880c49717b05632af2f253001197
SHA512

59a981896593cb2d150a10c89f95cec92015ebe5e7daff9cf5de74a85c46322b9713c5a91c8a3441dcb71c24dd130fce711e8873bac6585d999228f64200e783
SSDEEP

768:yevFIYG0on6HGavZUdQffoaFNnioNQpMGGb55bXS5/dtmC0n33gbzlIxuNewwTNg:z8V6HGavhgaFbHsmC033gXlIAApTNg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49c40971370b4920c4c51fbc7f3636d1

Files

49c40971370b4920c4c51fbc7f3636d1
.exe windows:4 windows x86 arch:x86

c6bb0de3943eb1bd41df2be358de09c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap

Sections

.text
Size: 155KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ