49ba0944071634167cae735194e945b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49ba0944071634167cae735194e945b6
Size

179KB
MD5

49ba0944071634167cae735194e945b6
SHA1

122f4d71049cc9fb9d4207ff2f05a178fbfd22bc
SHA256

cc2076c47b62c82ac5198cf26950cf1181355ff2a16697c875b0602b2fc1a263
SHA512

09dd8634be103dea07fad34bda31cb92e166d819928c8036277a490c540e974b6ff45dcb8feef5bedf6058bd2dea13060738a68986cdea133b56b8f6d1cd0188
SSDEEP

3072:9G/3KYPs6wHXPLx6WK4phS/FIPVoUErIPLkNkDGiNy/NpAYt0EdIHb6zSTDV6HFJ:9Gv7Ps6wDD4dIu5riybVjIHvTDEHFJH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49ba0944071634167cae735194e945b6

Files

49ba0944071634167cae735194e945b6
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.nsp0
Size: - Virtual size: 540KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 178KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE