049fd999af5f38146bccd17f402ff5fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

049fd999af5f38146bccd17f402ff5fb
Size

1.2MB
MD5

049fd999af5f38146bccd17f402ff5fb
SHA1

3f126736d17083c1c953f6e8e66834e879919297
SHA256

1d674147e1fe9b2bf94a4e3de737a30af4f5905089edd386af730df6a1c60f1d
SHA512

ace04c0c19899b1e6db921388063a89633d4503408158b33694931cc3369a629ab9c1ed18aaab34c014575f43ca2ebf960528de4a02aa284cedfd451ebe16baa
SSDEEP

12288:8jC6VOlPlBjC6VOlOpVWeOV7GtINsegA/hMyyzlcqikvAfcN9b2MyZa31twoPTdL:5bPl8bOT3E53Myyzl0hMf1tr7Caw8M01

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
049fd999af5f38146bccd17f402ff5fb

Files

049fd999af5f38146bccd17f402ff5fb
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ