49f94328a0e32fc4ed2b6ca819fd62ed | Triage

Sharing

General

Target

49f94328a0e32fc4ed2b6ca819fd62ed
Size

258KB
MD5

49f94328a0e32fc4ed2b6ca819fd62ed
SHA1

899ca1fda870cc754789e0eb27a923438626220b
SHA256

13396cf41d9c566753e479ae08a65376177f02bb59cd4708828c9064d9bb9d10
SHA512

0ac6af26b957e08f702045b02668b6bf14feaca8454d2daf2215f3695f17c7dbc3718f979fe4551617bf6ed7c95eba7ef5d480e9a04f92f13db18d2d9d358168
SSDEEP

6144:w/kaxZze5eQ3KSTPUe6MmWAfBSig7PxyyMJLQdA:xmNevagKBW8gFgJLQdA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49f94328a0e32fc4ed2b6ca819fd62ed

Files

49f94328a0e32fc4ed2b6ca819fd62ed
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qnk
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE