49dbb0b489896772d073bf167232cf38 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49dbb0b489896772d073bf167232cf38
Size

15KB
MD5

49dbb0b489896772d073bf167232cf38
SHA1

405c921d636a8f5ca55e4baae5039d9fabf3cabd
SHA256

ac79fe977f58129e936c2b503f8bdade5d6ead1d1385248eb27dd41249fee3c2
SHA512

ec9c6efe6a641fcb4154622b9f4cc9233f969ac890d9e1ded3fa2344926bb9b924420f18b22d2f62b0044e364fae86df4b263c208bcc59f23eb24115976c3d2c
SSDEEP

192:gphl46QKAOhIP2SAYnXAISR9U3sL+Nm2RQU9NCIW1Y8B/YsCe/TgcahA76dENzQB:ixQKzyPSbISDLGRQSNAB/9/D22NcqfB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49dbb0b489896772d073bf167232cf38

Files

49dbb0b489896772d073bf167232cf38
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ