49bc8c2923e018bd5037edaa8e26dc55 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49bc8c2923e018bd5037edaa8e26dc55
Size

225KB
MD5

49bc8c2923e018bd5037edaa8e26dc55
SHA1

3ce196dceabb830e93af7bf840da7736e56b473e
SHA256

aa75d1552ba03a7060abec8197528c175362f4ecc2090c5c872e029ca6d3519a
SHA512

eabc7b4140f1a8b909b68843f877927533f7686cd3f8985ed412183bc48a37698c97e82979f0ae0b415454d77331ecf23260a4f222918245d27d586c5822e87a
SSDEEP

3072:RFaj5U/8VnDrVyltmZAyuCfxMcaIqhl4m+P9GjS4SqIQR2XPi9jy:wDrwGzuAM9I4gUjS4SqHI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49bc8c2923e018bd5037edaa8e26dc55

Files

49bc8c2923e018bd5037edaa8e26dc55
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 222KB - Virtual size: 222KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cwqpu
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.wz
Size: 512B - Virtual size: 8KB