49e19070f863ff2ccc166a31983b5f33 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49e19070f863ff2ccc166a31983b5f33
Size

333KB
MD5

49e19070f863ff2ccc166a31983b5f33
SHA1

057b7a2db32ac83a89e0f0789b6c39815d302063
SHA256

15d468b7bff8326636b936aec3b68d537cd1f1d4f0615b80c6466834f8e9e880
SHA512

f648ed030a59ebc8f067b10c7d38cff4b705b51ee28a01e4a941dab073c4b824976a88e56794bca7957c89598879b4b007968a54bdf5f6a55a924b14add0cf48
SSDEEP

6144:6B18F3b/ZlDy+8KqKWWOJjqPBDw8a45RTJSs14JHOFBY4FWS9+/bBGSGB:P9RlDy+85RPMBsM5RTws1KOFBYXS6bBE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49e19070f863ff2ccc166a31983b5f33

Files

49e19070f863ff2ccc166a31983b5f33
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

??4_Init_locks@std@@QAEAAV01@ABV01@@Z

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.spm
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE