49b4d937ddbb8e6d1a314489a24151150b19e3ac56c9566e02ac2d1f59603e77 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49b4d937ddbb8e6d1a314489a24151150b19e3ac56c9566e02ac2d1f59603e77
Size

12KB
MD5

fd0de005b86d789148d086c91767e04b
SHA1

cbdfd63d877e01d63458aa893e93e2c3f70befad
SHA256

49b4d937ddbb8e6d1a314489a24151150b19e3ac56c9566e02ac2d1f59603e77
SHA512

73e045261dae372f62742ec657e2cee2ef5f69b6efe8f41e8b51643676998a2f4a02513475a15255e5a9fc5d89c73ea1c56a8d06d1b589b2ad03810fe4cd17ca
SSDEEP

384:4L7li/2zWq2DcEQvdhcJKLTp/NK9xa5Y:G2M/Q9c5Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49b4d937ddbb8e6d1a314489a24151150b19e3ac56c9566e02ac2d1f59603e77

Files

49b4d937ddbb8e6d1a314489a24151150b19e3ac56c9566e02ac2d1f59603e77
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ