f49ab9e171d811ddd61656eb6fb9e6c7cb40040ed587352ceaf83639563fab05 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f49ab9e171d811ddd61656eb6fb9e6c7cb40040ed587352ceaf83639563fab05
Size

14KB
MD5

1c2f9e8eec8a423410bc09d733c4ddc6
SHA1

e530ca57029f5b327b63f1f989c63c1fbaef6695
SHA256

f49ab9e171d811ddd61656eb6fb9e6c7cb40040ed587352ceaf83639563fab05
SHA512

0e9883d6196f0070756dca86cff009d14433d9bb62382ee280fe61230760dd66d31e2b9be6e7fab9f9ff05a82ef3c043971ed102bde3823c11b10a5b74b47d48
SSDEEP

384:c+VbtvOBeTi9HutCGiyX35gTkR7RdDE045HyDDH2:HHGEO9Hutiw35gTkRLAsDDW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f49ab9e171d811ddd61656eb6fb9e6c7cb40040ed587352ceaf83639563fab05

Files

f49ab9e171d811ddd61656eb6fb9e6c7cb40040ed587352ceaf83639563fab05
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ