494c70e66db93e063d05245f442048aa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

494c70e66db93e063d05245f442048aa
Size

39KB
MD5

494c70e66db93e063d05245f442048aa
SHA1

cf760e074d7162c8af03b8df2b1f65b3ab509ae0
SHA256

71a0d886f22e7c01afee76284cc3edcf959b65384362203eeef137def5c7ea07
SHA512

6da87d42b4df094c28f46d1425c1ca3c9eb5124ad1796d01b5e93f577139a190ed4a9c6e23df0cab4ed904b574e55229f1060c2514c49aa86396f8ee2a2eea17
SSDEEP

768:Ddf1jVllaBaw6AFzZ9aGnbaR0bYPn1S+GmD5ocSQkhRAUXT8d:Jl8awpFShfn1S+GmD5hSQkI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
494c70e66db93e063d05245f442048aa

Files

494c70e66db93e063d05245f442048aa
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 597B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 630B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ