49da6f54387c7866d975c291114bbf2a7d3a750fcee8a5dc4641c70d599f6ca1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49da6f54387c7866d975c291114bbf2a7d3a750fcee8a5dc4641c70d599f6ca1
Size

278KB
MD5

b47d0c890790dcf53abdc19ba4a4e516
SHA1

2578eef1e6c5d2749b454026048f9ee42869bd9a
SHA256

49da6f54387c7866d975c291114bbf2a7d3a750fcee8a5dc4641c70d599f6ca1
SHA512

c2ca382bb790f329213f2dda81f428aa77fb96e1b68c80c6c21da44e553731113aa1550120476639884dfb2aa87f8326e03db5b5a012bb6d8542f1535939bdb2
SSDEEP

3072:yRyYHxez0Ib/0lSlR04U47eUjRKm45vsZrcW2kOGtRPG/gytRcqoME9eCJZ20bWP:aLEZrcCthyHcoCu0ioBVAJLFVrZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49da6f54387c7866d975c291114bbf2a7d3a750fcee8a5dc4641c70d599f6ca1

Files

49da6f54387c7866d975c291114bbf2a7d3a750fcee8a5dc4641c70d599f6ca1
.exe windows:4 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ