49b0e877e41952d77274dcb18d6af3b0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49b0e877e41952d77274dcb18d6af3b0N.exe
Size

124KB
MD5

49b0e877e41952d77274dcb18d6af3b0
SHA1

e3caaa23e31d0925c43f5dfb6bf9de114759a1d0
SHA256

9a4187f94f60157c378c83e4d75f256a8ac9262ca0bceb74d55af5c6c82a4087
SHA512

6bd95ed2ac5a2e7efcdcada7bba0bd1cd0423883f493d26fefd9801b395bbef3401ceef2e537a5b581e91d82a06ade7af846a667f93af85f20a9620dd273589d
SSDEEP

1536:tPQc0IiI+7vAIIzuQ8Tr15WUkTdIOzq0ZDsnJvx/mf8/T/FXrH+YWZgvFc4VeTRn:dQc01zAf6QGkBIO20ZKvVsRD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49b0e877e41952d77274dcb18d6af3b0N.exe

Files

49b0e877e41952d77274dcb18d6af3b0N.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ