49b53d08ad100dd08e60175ee8c97d90 | Triage

Sharing

General

Target

49b53d08ad100dd08e60175ee8c97d90
Size

385KB
MD5

49b53d08ad100dd08e60175ee8c97d90
SHA1

aa422f8da26a76e9cdb8579bc9e75de8c81caae7
SHA256

0c766ad4f6692cfbf19d394532621444239089899aba9260bea38a7312e163ce
SHA512

c3295cb07896326293bd79645c158ab0ec2a104bd2692c05b0295aa81af7e54211b2973ffd828cc890f2db90570089a91a810fa1b77953560efdd1299971d27b
SSDEEP

12288:VI8HvonO4M+bgmoxfwyOynsU+6yHY29dLf/B:7vo9E5i4nsWyTjB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49b53d08ad100dd08e60175ee8c97d90

Files

49b53d08ad100dd08e60175ee8c97d90
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ