de449aec8df19d4c0aca54e345f93492 | Triage

Sharing

General

Target

de449aec8df19d4c0aca54e345f93492
Size

315KB
MD5

de449aec8df19d4c0aca54e345f93492
SHA1

139e72d1128a03b5d497cd7f4c1ca344597868db
SHA256

c1b90d3960f88fae2b03d6d1b6aad8f75f97cfd25d86a38a5967ea5d7ee4f4dc
SHA512

2612ac9a9f35014ac05f26bd6684538d09c465dee9d963942bbd1e8d439383ea49e05d9bde93f4dcb894f88b62f7d5d0dbd4e30595a28871304860b52863b24c
SSDEEP

3072:HlBvj9C3/KMprC4lTJHaxMllBvj9CJ/KMPMc:fjuJNjl9AG/jeJ0c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de449aec8df19d4c0aca54e345f93492

Files

de449aec8df19d4c0aca54e345f93492
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ