49cf16bac73dcb4e40369d2c6edf13659845ec8912c0b01c27d4d70e2223b730 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49cf16bac73dcb4e40369d2c6edf13659845ec8912c0b01c27d4d70e2223b730
Size

215KB
MD5

c5af258f32a12e1721a19b16d943c44b
SHA1

8b2bc78cfb6ca28feba9dd9219016b481eb46cb7
SHA256

49cf16bac73dcb4e40369d2c6edf13659845ec8912c0b01c27d4d70e2223b730
SHA512

a52fa842a1a1bc16bb4e66cb0054d4fce9c1d4632a2b879a9d2ae79cbfc6d0f43e69b90c63a9890433d333df4e58b2612f91c19cdeabf141d87885647caf8d73
SSDEEP

3072:BvEfVUzSLhIVbV6i5LirrlxrHyrUHUckoMQ2AN6B9/:BvEN2U+T6i5Lirrl9Hy4HUcMQn6b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49cf16bac73dcb4e40369d2c6edf13659845ec8912c0b01c27d4d70e2223b730

Files

49cf16bac73dcb4e40369d2c6edf13659845ec8912c0b01c27d4d70e2223b730
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE