49bd2e5364bbb99eeeae31f7539142c7e7a78fe0683f63d1258b0ed80e98c44e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49bd2e5364bbb99eeeae31f7539142c7e7a78fe0683f63d1258b0ed80e98c44e
Size

619KB
MD5

7e02e748da2972c41173f3fd727ad532
SHA1

c86377b85d15ef985460b0271ddf51d3f21e4bb3
SHA256

49bd2e5364bbb99eeeae31f7539142c7e7a78fe0683f63d1258b0ed80e98c44e
SHA512

25aaf69776c4d7f38481b422c2f822bcf2b319f947a1290bcbae94b4b8a6d75e2216497d2bcc2e8bf1adab4da34cc7e4c1d93d86a5b8b2c98e7b95f913703058
SSDEEP

12288:U6CgxlYkVTeYX0io5+B3nptFXb2cXIP9N8OolYlv/iFvQgx1V2Ryq:+ElYGnntF238KNaRQgx1sRr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/B.exe

Files

49bd2e5364bbb99eeeae31f7539142c7e7a78fe0683f63d1258b0ed80e98c44e
.zip
B.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 674KB - Virtual size: 673KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ