49c7de177501551b8a69d149c9830a16e6b730be4214ebd7659b21813ced8943 | Triage

Sharing

General

Target

49c7de177501551b8a69d149c9830a16e6b730be4214ebd7659b21813ced8943
Size

2.9MB
MD5

fbe43a559823651734ac2e3e6490cdb5
SHA1

4b83a4423810bde90518b14d2f0cae5932823622
SHA256

49c7de177501551b8a69d149c9830a16e6b730be4214ebd7659b21813ced8943
SHA512

1cfcb45f2fb661d6d79696c17b3945bc6ca804b52ef47f8f85428fa2fe878913656ffdb33a8ae35588e9ad53bf0e3f8102d440d62ca46ce0be3ebd095abae096
SSDEEP

49152:D7TvfU+8X9GrNOsva5RbKhF3ANkTTlmuEOapsAvMy0Mey0k:Q+8X9G3vP3AMU/yAvZ0Mck

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49c7de177501551b8a69d149c9830a16e6b730be4214ebd7659b21813ced8943

Files

49c7de177501551b8a69d149c9830a16e6b730be4214ebd7659b21813ced8943
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 994KB - Virtual size: 994KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ