c49f1d2b1dfdf05f979c6188f873867f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c49f1d2b1dfdf05f979c6188f873867f
Size

488KB
MD5

c49f1d2b1dfdf05f979c6188f873867f
SHA1

c589f5086b2cf7703d2355ff33cd7cfcf226a7a0
SHA256

6ad6fee9de874ad810833501b94afe93f12fc0cad991ebaffc1566282e273186
SHA512

ed5decf74c92394df50305d646356fe3d70c40ac7db8e9759ca2b23aa949dd5118a1b9afc3ca1aa98584be59cca79f25213137d15ad4581452dc0f126a18abad
SSDEEP

6144:PQ7aL5qrCMkKChgmyJ0LvKa67NX+5JGhfh3dg7aL5qrCM0KChgmyJ0LvKa67N:P0aLKC3K0zc7R+3GhrEaLKC/K0zc7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c49f1d2b1dfdf05f979c6188f873867f

Files

c49f1d2b1dfdf05f979c6188f873867f
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\admin\Documents\Visual Studio 2008\Projects\WindowsApplication1\WindowsApplication1\obj\Debug\WindowsApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 295KB - Virtual size: 294KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 179B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ