49020a4f6697b291dbe432fa72b1c872 | Triage

Sharing

General

Target

49020a4f6697b291dbe432fa72b1c872
Size

78KB
MD5

49020a4f6697b291dbe432fa72b1c872
SHA1

b0ebd73c439b6c74edfa2926ab5dab0fc7b07c7e
SHA256

6e5db75fc15ddb6a7f364be2762768c312bac2c4362790984cf827974f5e1a25
SHA512

e03879062da438933385e1bc153eef761250423931122c5c540f7e4731e82aeae6e15d50632f018ada2e96c81d7c1dbd3c532271492d85211be38bba4d589e18
SSDEEP

1536:7RWV58BXT0XRhyRjVf3hTzdEzcEGvCZ1Hc5RPuoYciQt96Z9/S1M1:7RWV58BSyRxvhTzXPvCbW2Ue9/v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49020a4f6697b291dbe432fa72b1c872

Files

49020a4f6697b291dbe432fa72b1c872
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ