49ddee5f8c6e17938be7bf14d1e2c119ddc62117ed5b600c5e5bcede18812921 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49ddee5f8c6e17938be7bf14d1e2c119ddc62117ed5b600c5e5bcede18812921
Size

1.6MB
MD5

a54df12b090868154ba2f0a33971b49b
SHA1

29576760f60d46d5b92c5e47cbb168d54409397f
SHA256

49ddee5f8c6e17938be7bf14d1e2c119ddc62117ed5b600c5e5bcede18812921
SHA512

54641b1ab5c1c92f9ed5224ca0046f9b7f948de7aa76c7b6d1ab97d9b6f591cd789f7842c0b204fdfcdd87272fcd98b7064a71136eccdd25192cf381c6742bb2
SSDEEP

49152:6+GlTgyo5qDGTAZq4etw7iYbENAlOYNPOaeT45jblDQT:698yo5qDGT0q4ei7iYbENAlOYNPOaeTn

Score

N/A

Malware Config

Signatures

Files

49ddee5f8c6e17938be7bf14d1e2c119ddc62117ed5b600c5e5bcede18812921
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ