49238d9d3e34d0336149d28cb3496336 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49238d9d3e34d0336149d28cb3496336
Size

331KB
MD5

49238d9d3e34d0336149d28cb3496336
SHA1

6499263bd7ed18cc88bd3b2c86887c177cb12286
SHA256

1472d4982590ca8be82d309d1b3e91f33cf6853b669898fcf800356fd1208c69
SHA512

790f0f5f11898979631f8cb55ecbcc1b93a620a1672710c7cb0bd88084117caea668e3cb83d948d0768f13256abd6fb41cec866e98908f556742e02753fb3e49
SSDEEP

6144:RCr13n0a5ROt2eYVp0CxOK9R7SXAkThOg1USE0lmPmqJ7dWWY7:QB0O/eY7IK9tgSSE0laFNdWF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49238d9d3e34d0336149d28cb3496336

Files

49238d9d3e34d0336149d28cb3496336
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z
??4_Init_locks@std@@QAEAAV01@ABV01@@Z

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.spm
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE