494d932d26cb15e1776cac4746527eab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

494d932d26cb15e1776cac4746527eab
Size

791KB
MD5

494d932d26cb15e1776cac4746527eab
SHA1

0b01badcf595479c2723a254060e8b12632d1646
SHA256

15b964ab420b76d7ddd3c2fe30f1a6df40cb2d0ff8f0e386c256bf1e2aa7cfc8
SHA512

66c427fc50a2bd43a2aa4b99850f733a729224ded0dda5d0ff959778b429e84544634d9401345b32370cc3b506294ff1d981c979e603f85cc2f9476ef8cc8cfe
SSDEEP

24576:mF8PBua0XzjyZZxM8u0NFj/XIeeuY/XTFKA:mF3a0zjwM8jj/XIBuYUA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
494d932d26cb15e1776cac4746527eab

Files

494d932d26cb15e1776cac4746527eab
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 579KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.spm
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE