49b2e649353696cc3d06d4e7558fe074 | Triage

Sharing

General

Target

49b2e649353696cc3d06d4e7558fe074
Size

1011KB
MD5

49b2e649353696cc3d06d4e7558fe074
SHA1

bfc076a5e3e59aa8126fe89aaaec8fef78606968
SHA256

eaf6c2570d1affec29a1acd812e8419725ff937211a0cfdb4211f50a537e575f
SHA512

270d5de745707c512bd1aae71946922b4b18c780b3d06b6e00cce9e4e9a7362f45a67bd56caf340e043496f45143a026eb8a10346fc8c447d380b9698356b289
SSDEEP

24576:d3BPQLBt4p3UAh2vFjr0AFnOC6R/TJiUr2Fu+NoQ:kQktvFjrX+LdK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49b2e649353696cc3d06d4e7558fe074

Files

49b2e649353696cc3d06d4e7558fe074
.exe windows:0 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 447KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.mdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 553KB - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.resour
Size: 9KB - Virtual size: 900KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ