49421d8e3a60e80e71db91d19c01fb42885e0b3e9da9d08f0eddab7934dfa368 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49421d8e3a60e80e71db91d19c01fb42885e0b3e9da9d08f0eddab7934dfa368
Size

120KB
MD5

33dc74af096799cef06403958b21df41
SHA1

87856a2ceef3299d9f3cb196bdf540321706f180
SHA256

49421d8e3a60e80e71db91d19c01fb42885e0b3e9da9d08f0eddab7934dfa368
SHA512

9bba55f6be2dad61ede4d95ff8ceceff3f9d1471fe91cca9b8279607b946c53608732af7813e24a1b2abaa0d10887caf1d4dba331bad67066910efe91de630e5
SSDEEP

1536:Wf0pmjvHKbroWFOqUPkvpM9PSIoBbbOZCbJFfluBpTOSl/P3EQavrcEFIj2:WftvqbsQhUA0odL9FfYBpTOSV3ngsj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49421d8e3a60e80e71db91d19c01fb42885e0b3e9da9d08f0eddab7934dfa368

Files

49421d8e3a60e80e71db91d19c01fb42885e0b3e9da9d08f0eddab7934dfa368
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ