9849ec1d94bc95330124b5a3c266ff0f4ff7913259fe8eab7de61e7e15b0f4b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9849ec1d94bc95330124b5a3c266ff0f4ff7913259fe8eab7de61e7e15b0f4b6
Size

64KB
MD5

81d318f9889365e7a27732a7e86548f6
SHA1

4c3b559fd695b22f75e754be26205b2b1c014b66
SHA256

9849ec1d94bc95330124b5a3c266ff0f4ff7913259fe8eab7de61e7e15b0f4b6
SHA512

92afd4dd5c4882a5ab2b626912e5743d8d2363d7f51964554d39b258d6b2a655dce347b7f2d0fe9bc29ea54cb214d8ac78837694ecd50abc8d05532a9d97b038
SSDEEP

1536:3N9XbY5YkAILaDzg/L6zzDEIwdZDrK6zm6NdQDQ:99sRLamL6zzDEHdZDrKk/C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9849ec1d94bc95330124b5a3c266ff0f4ff7913259fe8eab7de61e7e15b0f4b6

Files

9849ec1d94bc95330124b5a3c266ff0f4ff7913259fe8eab7de61e7e15b0f4b6
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_winc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ