b49090bb878989a595af03110e0a925a | Triage

Sharing

General

Target

b49090bb878989a595af03110e0a925a
Size

51KB
MD5

b49090bb878989a595af03110e0a925a
SHA1

ac1674e9409b13ab07e179b758773fc8d8132e0a
SHA256

e17e97794c6ec32088b857eb6d16995fc3b1c02fa5416795f65895b97735c854
SHA512

fef6af925f1ed385ab573e9494812d02d2f1cd9e54caa04d8e0a5ed0f44c0e32f0830640cb21cfc015016587508ea4bc116c22f9227b57f6556097d52b64c4ff
SSDEEP

768:QA/0LLaSldZyI3IhTwRMjRH3SiyAHEt7QXHM14Z4+d4FL7XhE6zXeQIG8e:QA/0LLaSlKZRHn6QNZzd4RtzXe+f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b49090bb878989a595af03110e0a925a

Files

b49090bb878989a595af03110e0a925a
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code1
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE