49f98bbf8dcd7dfb99cc267ab48e0e71 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49f98bbf8dcd7dfb99cc267ab48e0e71
Size

85KB
MD5

49f98bbf8dcd7dfb99cc267ab48e0e71
SHA1

0c6cc1fbfc6b805c1e33ddcea4afb86daebab4d4
SHA256

4f80ec4b8400e87b23adcd3aa8d2e8e0d1af89ba9fdb2e852543b692dbba24c5
SHA512

ea92032f560cf231c2a7cfd0175088fcff5bed1e47c2661e72c3d49ff4f5feda878982b4416e0394f58d558f0748c3387b24550ac63121f8db74a8862765a97e
SSDEEP

1536:hcS2A2JbHAAGvZzXwIeqGRTYTXDr436xUnKH7fqXvYDZL8vKnp9d9HS+9MGMU2ZD:2SB2JHA1vtwI9UYTXDe66Efq2LTTnLtG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49f98bbf8dcd7dfb99cc267ab48e0e71

Files

49f98bbf8dcd7dfb99cc267ab48e0e71
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 84KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE