b49e7dea227195df959451c676142115 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b49e7dea227195df959451c676142115
Size

79KB
MD5

b49e7dea227195df959451c676142115
SHA1

3c6753bfb7aab32b3bebc4bf604fac61f64196c4
SHA256

973ac23fa6ee48133749847dfc8f420daad22d5c1142bf52f111cf19a9fe6453
SHA512

c6d15ce04f3e6e654def304e39d82f81f0ee99fb1179b10c6c6f555d162c3507c7666d83e5c960c8451a1668b4f9ba1825575a5e79f43eb7d22032dfc9f52c9d
SSDEEP

1536:ApcvBq2h8vA0tKiSuL/NG3F8hI/I2vnPqNwtm62xkEGA1plIaiEovE:Ap+hLkS2NG3Fm92vniFpxkw1PrME

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b49e7dea227195df959451c676142115

Files

b49e7dea227195df959451c676142115
.dll windows:4 windows x86 arch:x86

d3b10c87a3425ac01609aef2e3e950ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

gdi32

DeleteDC

msvcrt

srand

user32

GetWindow

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 13KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE