000b49b38763d9078e6e9c61fe380bcbdfde329659bf0bde89169a0ef99ca54d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

000b49b38763d9078e6e9c61fe380bcbdfde329659bf0bde89169a0ef99ca54d
Size

1.5MB
MD5

60e29313bf931d9a4524c8c123dc2029
SHA1

3ac7fbc7e125bfddeff2e3bbbbf64b78a905c999
SHA256

000b49b38763d9078e6e9c61fe380bcbdfde329659bf0bde89169a0ef99ca54d
SHA512

ed2242686e1d5fa421e97545c2be93434e38624ed2e3064090dc9a3bd864e32ce1fca554beb2c67f4381c18bdae9a53d0c8e91e740b1bd4407446e0556a8bcb0
SSDEEP

24576:fgKCX8T8aFFuZg2eRYO2nhdjH6BeAH1vg9Cv4Rc6JDEugPw2RHV3McozQUgFg2:fx44u5H6Bj1vgcv4Rc6JDEugPw2RHV32

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
000b49b38763d9078e6e9c61fe380bcbdfde329659bf0bde89169a0ef99ca54d

Files

000b49b38763d9078e6e9c61fe380bcbdfde329659bf0bde89169a0ef99ca54d
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ