49bbf13c36499e69c3c0232e47297587a8b0a63c0192fd968470d65ae71a8e2b | Triage

Sharing

General

Target

49bbf13c36499e69c3c0232e47297587a8b0a63c0192fd968470d65ae71a8e2b
Size

27KB
MD5

7eef7133deeb54c7151630ffecf14eb3
SHA1

78ea2883f62d1a071af24d4f0782f600f22de6bd
SHA256

49bbf13c36499e69c3c0232e47297587a8b0a63c0192fd968470d65ae71a8e2b
SHA512

8e8948256b8faf5c1e1e0630c8d84cfd294230395f68341d8f96514ba8196d866c0bbff70ae7cf9cc4b2e09d14792b0faca61ddb9a39f5f57e613b4e347f15dc
SSDEEP

384:UMp3HU08dJlM1jpj0Z3g+4tdmuJc1PbJkOUcFnj+r9x5qvsgT:UEHUblMVZ3kJOCaxqvsgT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49bbf13c36499e69c3c0232e47297587a8b0a63c0192fd968470d65ae71a8e2b

Files

49bbf13c36499e69c3c0232e47297587a8b0a63c0192fd968470d65ae71a8e2b
.exe windows:5 windows x86 arch:x86

30c213a1468a81a73c565e04024cebe9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

kernel32

GetModuleHandleW
GetModuleHandleA
ExitProcess

Sections

.text
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ