49d93ea44166c4151947c188dc3a1997 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49d93ea44166c4151947c188dc3a1997
Size

506KB
MD5

49d93ea44166c4151947c188dc3a1997
SHA1

2814a39fe7b5fd2ff442623e9e802f59542e10af
SHA256

decb1e05c2f65d66fdb952bcf63ebf3c47364b325731055a3ac07639caf39a6e
SHA512

b49c31f1b448f3748f84bcbd78da80b86c5674ebb288b60fe21c58588ed9aca045d1956ed5868bc0adb0b2d8623c1b02d4520897592874e1b245044572c0f575
SSDEEP

6144:DUGHa4NmE1vUkWMEiJClvc6ebrAQ52dI/BqYKCXfa7qlv+Xcwi+7EPg+ePDFqxBp:DUG64NmMvUjYJCVcRkZSVB+a+7q+rLm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49d93ea44166c4151947c188dc3a1997

Files

49d93ea44166c4151947c188dc3a1997
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 475KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ