49747539b93a284787300a874d1ef8889e13ba8f0bf6f854a5ab51ddf19b0569 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49747539b93a284787300a874d1ef8889e13ba8f0bf6f854a5ab51ddf19b0569
Size

125KB
MD5

4f0e9cb6549a06b424cf711e4aa6cf9c
SHA1

ed3e79a8378bb79c81b0a837db6557be03ac3bde
SHA256

49747539b93a284787300a874d1ef8889e13ba8f0bf6f854a5ab51ddf19b0569
SHA512

9938af1dfde79f5d6caefb7f90a13feeb42765d4a19cca0d0edca71cc35f2b82944dfdb97e0c8261aeef81e003b9e0b275ba8cb452eca7808de7ca90dac2c6d4
SSDEEP

3072:xdKvwz2wJBUfNAk73t2BEIeeuH2AW0A2DDZF63QpEVBj+InV:xUv1wfUfNtTt4a2A/16SBy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49747539b93a284787300a874d1ef8889e13ba8f0bf6f854a5ab51ddf19b0569

Files

49747539b93a284787300a874d1ef8889e13ba8f0bf6f854a5ab51ddf19b0569
.dll windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

entry

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ