249edb120bcc59692e5d359f4bcb6397 | Triage

Sharing

General

Target

249edb120bcc59692e5d359f4bcb6397
Size

2.2MB
MD5

249edb120bcc59692e5d359f4bcb6397
SHA1

0c8feaa890a0dd0b29e86510c66245a5a9295f6f
SHA256

d3f529f5c3a5511cc259fbc2874482444477c85e3e1106463a0d4a55a4b8c187
SHA512

9dc2fe4e898dc83bb97abddd9b35f59674544065dbeede8efe01ae16b48176c0f4c3789fa9e06f126e40924014f5ef76b3f86f582e87b9559c35e9451de7e91b
SSDEEP

49152:s7X+21nek/ROLmCnBf27s1Nsjo2hnBCE6WQtsUM:WX51nek/RennBu7aNsjo2hhtQts

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
249edb120bcc59692e5d359f4bcb6397

Files

249edb120bcc59692e5d359f4bcb6397
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

l:|J
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ