49d7a19838d99593ac2dc87ae5cc5a74[.]bin | Triage

Sharing

General

Target

49d7a19838d99593ac2dc87ae5cc5a74.bin
Size

17KB
MD5

49d7a19838d99593ac2dc87ae5cc5a74
SHA1

ec55299105509d40bba9498035d5d9487e6bf8bf
SHA256

fe42d43176370ad8bc3d34f75724cc68e687fea3b1042ce410284ba752df3986
SHA512

6c214748745cb064baf4adcac0b4f9e37722c2ea2f9dcce86fef78becea7db8a95a9413474dc6e649fe88522050444ace16837df6b564ab94b4988829a2aa1d3
SSDEEP

384:4FjnrvQ8acmZO2Zp+Nye8pqrmub8TyztsDN:4lzQ8aoKK8o8TyJc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49d7a19838d99593ac2dc87ae5cc5a74.bin

Files

49d7a19838d99593ac2dc87ae5cc5a74.bin
.exe windows:4 windows x86 arch:x86

1e4c0da5737da53aff5e6e0ab7de1efa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
ExitProcess
OpenMutexA
Process32First
Process32Next
Sleep
CreateToolhelp32Snapshot
CreateMutexA
CopyFileA
OpenFile
CloseHandle
FindClose
FindFirstFileA

advapi32

RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE