49778d0ba37172a418dffa351651f6eb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49778d0ba37172a418dffa351651f6eb
Size

492KB
MD5

49778d0ba37172a418dffa351651f6eb
SHA1

f22d06bc77273515ef5e197263b218a488f5ae75
SHA256

70fceb150275c2eaeac082f9e5ff745b28a8e2c3f0669108b6b15352711fb047
SHA512

f1e91ebdd3480eaa81cb583d7c96ccca101301820db959a566c4e5ec780c67bd66d7bbbbdc1f255d68796291ef60c37733a035beb2c91bccbf173cd70f70cb59
SSDEEP

6144:0RX2+267aH79/nYFRRL5NSFhglLzMnJqTFjrajpjqKippwiepeTU68VKBlqspxA9:Tv8+dQF5WIBKEKimpew6UKBlro

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49778d0ba37172a418dffa351651f6eb

Files

49778d0ba37172a418dffa351651f6eb
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ