149bda649df244870b19f4a1cd587f09 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

149bda649df244870b19f4a1cd587f09
Size

73KB
MD5

149bda649df244870b19f4a1cd587f09
SHA1

57bb35d41a95162bf3103c89fde8ec5cde98832a
SHA256

2260281e96408422bbe7f6ab8b8cf205371e9f13d95528cf760e21f084b1b6ea
SHA512

19ce34152d210ed6bc8a9a9170ae9b2ea0e6c817158f99bbbd8d55720eccfdd29c8ac0d6979c469b6c6b724243da3cf01130070c83323590c19acc75eb9ac74f
SSDEEP

384:+41DuuOFZyUVpULCgDb2prxVTn24X/m7Q6Al6z+yXpzxxxxN:fDcZyUpULCgo24T96ayXtxxxxN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
149bda649df244870b19f4a1cd587f09

Files

149bda649df244870b19f4a1cd587f09
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE