4d49af0fe3966a4b35f741691f1669f3 | Triage

Sharing

General

Target

4d49af0fe3966a4b35f741691f1669f3
Size

297KB
MD5

4d49af0fe3966a4b35f741691f1669f3
SHA1

cc8861eeaad23c7ba6c4cd361775155a35e6c026
SHA256

2123f7d091df87e65eb3a6342e67d50770c892b7344ce3da47ea7a12002336a1
SHA512

abe2839f3fddb4fccefe7ab1ff9d3e31de720171ee47a62af7a9ddf60f62580d42a76f3511cfa0c7e762a4864961bdff0e352fb78c87aa9e02c23fb623424bc7
SSDEEP

6144:BWAloZgjB/6QqfMpiIuQH+FgYd4VaVozw1MpMgS:4+3YzDHdKpMH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d49af0fe3966a4b35f741691f1669f3

Files

4d49af0fe3966a4b35f741691f1669f3
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

_ctime64
_gmtime64
_localtime64
_mktime64
_resetstkoflw
_scprintf
_scwprintf
_time64
_vscprintf
_vscwprintf

Sections

.text
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.heb
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE