749d40f5a40080f2840948a6699b28cb3e619d0987fff175f3fa1854a6cb8f16 | Triage

Sharing

General

Target

749d40f5a40080f2840948a6699b28cb3e619d0987fff175f3fa1854a6cb8f16
Size

1.9MB
MD5

2db892d645382af4a0a54351efd0b5f6
SHA1

13502682ec5d102d40b2622896a3cf4767f07106
SHA256

749d40f5a40080f2840948a6699b28cb3e619d0987fff175f3fa1854a6cb8f16
SHA512

22f465112c3ecbf76bb1f1a16400725dd19fdf2b5c0bbbbdffd82a217f60afe0784a0cc285eb0241deca2206c15d3406c4db9770f889163d5f63a319eb54884f
SSDEEP

49152:zsC/lYEBY/sEAQACR07Q3byRD8aXY658:zsCdYEB+fAw07QLyLn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
749d40f5a40080f2840948a6699b28cb3e619d0987fff175f3fa1854a6cb8f16

Files

749d40f5a40080f2840948a6699b28cb3e619d0987fff175f3fa1854a6cb8f16
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 394KB - Virtual size: 393KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 64B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ