49ccefba8d90a783cdcfe0317fdb35c6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49ccefba8d90a783cdcfe0317fdb35c6
Size

280KB
MD5

49ccefba8d90a783cdcfe0317fdb35c6
SHA1

0b042404eb93e2d63784b7584b2bfb0182f2267e
SHA256

0b69b6ec6a08863645d6113d34c2af1420527d00a27ad6bbe7fb0386ff85ed54
SHA512

dce9dc1baa90f33074b22f0efcc6603d89c8d6ee157a5750fbec470f3639eac04b01a309add912aa14ff59eaac11c1bfff030163d05124b621737951b8626be8
SSDEEP

3072:mOK/ndD0wz/mtvrHKKOFhE7eGZnK5YjMM1GA1cElSCGndcd1QMlhgOtalEWjRaFm:RsdDz/GvrHKVvCNJxrEdensblEyaFTY/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49ccefba8d90a783cdcfe0317fdb35c6

Files

49ccefba8d90a783cdcfe0317fdb35c6
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 44KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.newIID
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE