49c9f5fa19ce75f539b475a60466495e5af6083660427cfd34367eb3897291e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49c9f5fa19ce75f539b475a60466495e5af6083660427cfd34367eb3897291e2
Size

289KB
MD5

9f63f91b88e80b04863e099352698147
SHA1

6b60ad5603039670c8dae0cda172e8ef3f6f4b2b
SHA256

49c9f5fa19ce75f539b475a60466495e5af6083660427cfd34367eb3897291e2
SHA512

6f1720710883366d5706c989532c4e961efc148b4aeb7aab627b858ed4c080683fe4d368d25d18abc9c8f74515a13a17e0b1f0f6f8b1ec65573214fcd2c9e9f5
SSDEEP

6144:EuZxo34JUbtSRodEG9BkPskECzJLaQVbU5:1k42btSRodEG92UklJLJbU5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49c9f5fa19ce75f539b475a60466495e5af6083660427cfd34367eb3897291e2

Files

49c9f5fa19ce75f539b475a60466495e5af6083660427cfd34367eb3897291e2
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ