4e49d7962a24bf2f36e44889ce834471a215eb506fdc2b9583ac8d8a23a498dd | Triage

Sharing

General

Target

4e49d7962a24bf2f36e44889ce834471a215eb506fdc2b9583ac8d8a23a498dd
Size

393KB
MD5

0971e959d4e276ae3bcb6aa5b6781967
SHA1

a7f25d946e99fc5ffda53f81a7a1df9773ca0732
SHA256

4e49d7962a24bf2f36e44889ce834471a215eb506fdc2b9583ac8d8a23a498dd
SHA512

d1a395d23766fa81d8c4e9ea0956dc13db2b34c15e14523ccc922ba11e075177964fa9f0e75c4bef575aa493848f4cf1084a488e1046f3901f3f785b9268faa7
SSDEEP

6144:EBvDxW82xv2010brGPYraoa4ybT6FlRHi1tmFBHPGvmgHBiPV/+2j:SxW82xvf1X0xWtNvhHg1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e49d7962a24bf2f36e44889ce834471a215eb506fdc2b9583ac8d8a23a498dd

Files

4e49d7962a24bf2f36e44889ce834471a215eb506fdc2b9583ac8d8a23a498dd
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 338KB - Virtual size: 338KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ