49ef5400b6b9acf2fce45b7811789b70c95a675b40dbe622acba3dfa7385bc24 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49ef5400b6b9acf2fce45b7811789b70c95a675b40dbe622acba3dfa7385bc24
Size

6.9MB
MD5

eec97bf963acaaf1ac9a95cbcdee0082
SHA1

dd45a13ad2fbe4c8e825e9cd02d8d88622e15884
SHA256

49ef5400b6b9acf2fce45b7811789b70c95a675b40dbe622acba3dfa7385bc24
SHA512

80dd0211dac5707d784ae9a71429f18d506f71c9610b72b7e28d88c3608f215397505fba3f10521e1e1fa979a539450f7ca35b24c5c601a7d3da0b78612f5472
SSDEEP

98304:yzyQ4kc+v4jvDhsQepuwmrkz216aPE8d9X+X1M2CX27eGqc6hxTGZtsAzFjTidLb:HQ4PTP94zHQ9OX1M2CGjn6hDc6LKEzj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49ef5400b6b9acf2fce45b7811789b70c95a675b40dbe622acba3dfa7385bc24

Files

49ef5400b6b9acf2fce45b7811789b70c95a675b40dbe622acba3dfa7385bc24
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ