49f266549a812bf9d120998a71374ba4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49f266549a812bf9d120998a71374ba4
Size

385KB
MD5

49f266549a812bf9d120998a71374ba4
SHA1

4aee6fd1fe7f728b8fbc24ae4e4b00d91df874ff
SHA256

72fba9d9f2f0174ea47218677a4b9052ab9cb16768e40856f1f2aa155715c859
SHA512

baab9b5a95dad9847cd33168eae89f691864a4c84656782511587b8f29e9cb488b21a703e67606244a5e9d59981d66a7481d3a7bfa446981bd591f67f5f3206e
SSDEEP

6144:r+8N0TdjDOHX5320XXTo/fMEPzckR61KjemLnYvYXbuV39XCRNnLPpiTrB:ZN0pcV20HUdbmysvNTCRpPYrB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49f266549a812bf9d120998a71374ba4

Files

49f266549a812bf9d120998a71374ba4
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ