49f861507a6aa19a11965c8d9121d75868934712f2935420c312409e1ae39a49 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49f861507a6aa19a11965c8d9121d75868934712f2935420c312409e1ae39a49
Size

322KB
MD5

dcdcbd63a2edbac6901aa3aefe937683
SHA1

92d24aa94edb62d9a1b7d0784ac60d2de1e6e083
SHA256

49f861507a6aa19a11965c8d9121d75868934712f2935420c312409e1ae39a49
SHA512

815cb9d37e8b509727ee41dcdef322fc0ec6c41bae0d162db89d80d2749e6a5012452ebea97d7bd1af047f3755dae8f88df8794fe37dff4f48c12e5d5df1e65c
SSDEEP

6144:KoOFfquGLPaRG1xESGrOAoONw6UbMpE8i/RsBIkhuAu1IO5eONj:KopWaEDNSPF5sBlhh635eG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49f861507a6aa19a11965c8d9121d75868934712f2935420c312409e1ae39a49

Files

49f861507a6aa19a11965c8d9121d75868934712f2935420c312409e1ae39a49
.exe windows:4 windows x86 arch:x86

b3fd777a7a0f7d1c58ad898084116314

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

CreateWindowExW

advapi32

RegisterEventSourceA

shell32

SHGetDiskFreeSpaceA

mscoree

_CorExeMain

comctl32

PropertySheet

Sections

Size: - Virtual size: 112KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 93KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE