f49e810c46b65790d8c8f1ac2ac9f63593fff4f1a133680c88a5787dcb1df0ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f49e810c46b65790d8c8f1ac2ac9f63593fff4f1a133680c88a5787dcb1df0ce
Size

1.7MB
MD5

6868f4a48063588989be0c8a02da2433
SHA1

036f5db3acd84b490deeec9474a69231852c3621
SHA256

f49e810c46b65790d8c8f1ac2ac9f63593fff4f1a133680c88a5787dcb1df0ce
SHA512

30695bfa52bde5b3d0f65b65dee8fbb85b527a8ae6400447cd3c0574a9f49a4334c22957171745fcf98abfa18f184a848b3751c8b60462bf81eb8a381a09f4d6
SSDEEP

49152:7ECVHYNkXiBhjiy9OV2zD+BZpJepFTGPKxs2W2hEzc1yy:f0E4GyaMEJUFQys2/GcEy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f49e810c46b65790d8c8f1ac2ac9f63593fff4f1a133680c88a5787dcb1df0ce

Files

f49e810c46b65790d8c8f1ac2ac9f63593fff4f1a133680c88a5787dcb1df0ce
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ