149bf05ba263c95c33c4603b5b1b0e4d | Triage

Sharing

General

Target

149bf05ba263c95c33c4603b5b1b0e4d
Size

617KB
MD5

149bf05ba263c95c33c4603b5b1b0e4d
SHA1

196dddad4ac939d379c3ddc4ff4ccd025edfcfc8
SHA256

c8afdcc52a5bfb0f0296ea592b123bd3c9b0ae884464e22b89d56952e700c011
SHA512

91cd48484073439e9f2de4fb61f31a9980cf1e9ea7346395b6981435e19f5277fb6649ce717ab8c944ccd005faf587e3c936fde5ab5081b0b64e7f75d5320fb5
SSDEEP

12288:txd2ksILL1VtQK2qBXMCcMf65zm3ltQbJLG/WI4eWfF7N3dL:N7sIL3MqBcWf65zm3l2wJ4dN3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
149bf05ba263c95c33c4603b5b1b0e4d

Files

149bf05ba263c95c33c4603b5b1b0e4d
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

:|7 @
Size: 490KB - Virtual size: 489KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ