b49e7bd2cfe41c1ed3fdc015bdf46820 | Triage

Sharing

General

Target

b49e7bd2cfe41c1ed3fdc015bdf46820
Size

1.4MB
MD5

b49e7bd2cfe41c1ed3fdc015bdf46820
SHA1

c84f1fb521f678b7569c8caf9f1939de48a20fa9
SHA256

79e4707cb16f0165eb45bc047b5c5d9ea8e98cb6f91a0e40e825fdeccb961698
SHA512

5cf6c8906cf7a0925e140e42390e8be0f9db3028d1dd96ea8f1f7476415e3a6bf7db428bb3edf1d3443388d38089bd703c73055a57612bd73e3cf83df06f2ebb
SSDEEP

24576:jYq0SGI9Q+vGRiR7yH54H4UiyJ//7yYiqnZhl6BJ6O:jYvqy+uQ7yH54YTyV7tJn7l6BJ6O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b49e7bd2cfe41c1ed3fdc015bdf46820

Files

b49e7bd2cfe41c1ed3fdc015bdf46820
.exe windows:4 windows x86 arch:x86

a811be5ea143945ea3f2794c051e1d1b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeExA
GetDefaultCommConfigA
GetCurrencyFormatA
GetBinaryTypeA
CompareStringA
BuildCommDCBA
AddAtomA
CreateHardLinkA
FindFirstFileA
GetShortPathNameA
GetLastError
GetProcAddress
ExpandEnvironmentStringsA
LoadLibraryA
GetStringTypeExA
GetDefaultCommConfigA
GetCurrencyFormatA
GetBinaryTypeA
CompareStringA
BuildCommDCBA
AddAtomA

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

code
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ

.itext
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE