549b5603cd6faf869ce1e9355a8541da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

549b5603cd6faf869ce1e9355a8541da
Size

121KB
MD5

549b5603cd6faf869ce1e9355a8541da
SHA1

c6e5f9257cd84e7260c1bacacaa237e80664d536
SHA256

4256b4b0818a43e266d5c9ecc243b923aa7978c30d7a7efb8d43796bcf819652
SHA512

f72d16f67e6b06dad4d08c16963a0fc870ad9dacfac0b97268336d65c9c6321e90c3d6a82b86f714f427476e7c29a5ca8bbc98afc7452c890da1990aca1f8f76
SSDEEP

3072:SxP+IY/7ClkPHxwY2OvRoZ32kLZT9AqHivdSlX12WQt:4Pji7KmdoZ3DJ9AqHksry

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
549b5603cd6faf869ce1e9355a8541da

Files

549b5603cd6faf869ce1e9355a8541da
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rawdat
Size: 111KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE