49c50306fee26b2e520e940dffd8dc5b084255e85bc7f42a8a2211f2f63d36f1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49c50306fee26b2e520e940dffd8dc5b084255e85bc7f42a8a2211f2f63d36f1
Size

14KB
MD5

3a1a5cf63d317c228c3e4cf2feb6590b
SHA1

df622208642276940a162f8eb7aded2319553f9f
SHA256

49c50306fee26b2e520e940dffd8dc5b084255e85bc7f42a8a2211f2f63d36f1
SHA512

496e5cfa17c510819777fb1004123c5bbf704841fe7092bcbcefcce9ccc2012410723599ca6faa120e99e8d619f02383b28095ccd8af1e119c53b687a1c5f4c2
SSDEEP

384:fixhRhX8mEFAFAFAFAFAFAFAFQ4LA0pyDE045H6MMMM:Kxh3X8mjLA0aA8MMMM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49c50306fee26b2e520e940dffd8dc5b084255e85bc7f42a8a2211f2f63d36f1

Files

49c50306fee26b2e520e940dffd8dc5b084255e85bc7f42a8a2211f2f63d36f1
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ