49aa037347cabd5a94cc129a335c43a243eb157cf64a3573e72e5f10307b4e74 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49aa037347cabd5a94cc129a335c43a243eb157cf64a3573e72e5f10307b4e74
Size

1.6MB
MD5

78921ad3c132c40b8e5da37597d25527
SHA1

f9054031d2b93e87f13fecc21c74ae592f268b49
SHA256

49aa037347cabd5a94cc129a335c43a243eb157cf64a3573e72e5f10307b4e74
SHA512

49349364e3d22f6409d9a0a697bf9190be0990e0220f7941107550a9eb5b9aa613492b89e3d623d78474abdd6a2e40a4c584b8a590a8f9b4e873c0ce8b5bd0c5
SSDEEP

24576:YjBVDaSCj7ryhOR588fKMfaSDyluIltORTyPq3cgRsx2uvm4I90391s6xd:+D+rKOR5xfKLAOSVuvm4qizsid

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49aa037347cabd5a94cc129a335c43a243eb157cf64a3573e72e5f10307b4e74

Files

49aa037347cabd5a94cc129a335c43a243eb157cf64a3573e72e5f10307b4e74
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ