49e2d6209a23871ed11b60b628a2ef78 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49e2d6209a23871ed11b60b628a2ef78
Size

70KB
MD5

49e2d6209a23871ed11b60b628a2ef78
SHA1

c9e53e64fa4ec51aed4aacf6e9861ca20eede738
SHA256

d534d4d648b7fde4035de20806642b0c88c5c5ca34d56a1a85f578713d2fb194
SHA512

3280e1064f912e9f8e31774e5d4e6a33fa1e3f04ba55f73f9f25c7686e2e412c5ca4069af720322f09abab840712b318fb6ed7502228170f4972fa3acdc91e96
SSDEEP

1536:343P1IYZw49qCXXICF1D3zR7wZ2k2FRLvxNATgMn0oT:343P1IHUqCXYwzFR7xGEMnxT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49e2d6209a23871ed11b60b628a2ef78

Files

49e2d6209a23871ed11b60b628a2ef78
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Outt
Sett

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tldksods
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ