49ab12e2a0a59d1d9dac72092e5a20c896f6758525b9c1a6a23f73943a3f20b0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49ab12e2a0a59d1d9dac72092e5a20c896f6758525b9c1a6a23f73943a3f20b0
Size

880KB
MD5

3d36e25b005b716c0acedfae8924a48d
SHA1

377df309a44d70d08d8bd535a584c64ac74c32ca
SHA256

49ab12e2a0a59d1d9dac72092e5a20c896f6758525b9c1a6a23f73943a3f20b0
SHA512

1544ab18db5e58a05f6c30bc5026f97e37039559dfbab503da7a6538459804853c1bbbdaf863c9e834fba3b9df3aa17b618a027c207ba7a3c44fd94cc2de047e
SSDEEP

24576:cmuMenFpEQla50LizpWerhtZMXsplL7O:3urFpEWK0LizpLrZy0VS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49ab12e2a0a59d1d9dac72092e5a20c896f6758525b9c1a6a23f73943a3f20b0

Files

49ab12e2a0a59d1d9dac72092e5a20c896f6758525b9c1a6a23f73943a3f20b0
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 872KB - Virtual size: 872KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ