49bc6d1e8111a387f29c96c21746d159 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49bc6d1e8111a387f29c96c21746d159
Size

1.3MB
MD5

49bc6d1e8111a387f29c96c21746d159
SHA1

78f1569c4654e8e2d7fcf8d889d9878fe3f8d77f
SHA256

9277e8653f74d72a8bd989e326e0c39c62e85a2f50f0f44ac50d7487788154dc
SHA512

fe118b6ba7035f53374dcf338be54c467c7c329b4be909a0a0b5f6917fbb00770792ed6a5145aa9c9a015abe2f386d059d2f31c49692bfd11b939524791c6dae
SSDEEP

24576:NCH8b/8OTFHDUTEc8iHNFplNx/B5ewYsKUnNzO0LdXewKNnp3:UjOTVsEc8MNFHBQCKMN7pXRKNnp3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49bc6d1e8111a387f29c96c21746d159

Files

49bc6d1e8111a387f29c96c21746d159
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 256B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ