49dbe92ddefbd86853e0e03a2ea7dc768524456b6ab842cb74d05ece9cb9bcd5 | Triage

Sharing

General

Target

49dbe92ddefbd86853e0e03a2ea7dc768524456b6ab842cb74d05ece9cb9bcd5
Size

119KB
MD5

3a45197ccaeb6bf7e8299bbb712fde12
SHA1

e10c6ef729b98474583eb8a08caab4375b61c025
SHA256

49dbe92ddefbd86853e0e03a2ea7dc768524456b6ab842cb74d05ece9cb9bcd5
SHA512

d15eb2b4dd111d4ef162f54d89c06efdbff41394251c5334534fa4b6f4c0ab370a88d8e7a473ef9428bf46dbe55cfc815c996f7eb18ddfa7db8a1bb2da34a8fb
SSDEEP

768:KUTve9oTBx0dWbr9k4FPoLrCz2K8bi+/SD1c7cniYs2sgALvv:3/qdi+S5tnCvv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49dbe92ddefbd86853e0e03a2ea7dc768524456b6ab842cb74d05ece9cb9bcd5

Files

49dbe92ddefbd86853e0e03a2ea7dc768524456b6ab842cb74d05ece9cb9bcd5
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE