49bf387ff134c0613a96ba231e1101f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49bf387ff134c0613a96ba231e1101f8
Size

137KB
MD5

49bf387ff134c0613a96ba231e1101f8
SHA1

94e42439aeeddd653bf280b1c12d002dcb81018f
SHA256

69550b9285aa4a092076a11915fe3dce3eb5aaeefae6a7cd6d67d18573b64e42
SHA512

bb63f956fa1a73f25f8a01e78a82063853c1db08c2f9730dc2d6ef5f2130b499d51e8384e2f6c12bcac490efb34b29a31b161c309f5869263708ed58d9da7f4d
SSDEEP

1536:/ou8efG2zua+Ws2rg2WxXUOqD1oucZZGY5Q+hiShZqD5:/X8edzurWs8ghXUOqa7OXSGl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49bf387ff134c0613a96ba231e1101f8

Files

49bf387ff134c0613a96ba231e1101f8
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

&~*b,I|
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ