49b17945db3fa1b3c43c250e5deb1dd7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49b17945db3fa1b3c43c250e5deb1dd7
Size

28KB
MD5

49b17945db3fa1b3c43c250e5deb1dd7
SHA1

ec56fd24a000accabd95b0dee67f4e83fed25776
SHA256

4abcf70411d672be21676de8d07f56f134c6350b339ef176f54a97ff61b9c789
SHA512

3a9add1bf937790ca62f2e3a2c259a4c3eca74e2109d81722e32a164095ce68c71f665ac21e6adefc8340453171a2f4b0bf6c5d8e217a6a6b7c3eb168e22b27c
SSDEEP

192:G49HsxwSUFx+UEqzerwdIpJNY8uMp7QPJVNMxUPAUBlzW9fbhdP4hbVPMBXbKm0G:GBXUFh1yvN/uMmxDMmkhdQhhOzO9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49b17945db3fa1b3c43c250e5deb1dd7

Files

49b17945db3fa1b3c43c250e5deb1dd7
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 496B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE