49ad1a861e744405ad005d9b32e8dd50N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49ad1a861e744405ad005d9b32e8dd50N.exe
Size

712KB
MD5

49ad1a861e744405ad005d9b32e8dd50
SHA1

28f2ebc59f00a432082c7ba908ddee30c022243a
SHA256

4b8dd8c547eeb717fa49e9a55618028b33488ca26418e04ba861879de714948f
SHA512

5af9f363b07723d15e4a977b6ff8406793cf4eef8a2db2d2a6c18eba87d6c923e55117fbdb5cb123389699427db0a3f1cb8b2c3f263423ba98719e028fae7638
SSDEEP

12288:FU5rCOTeiD3i1VgNXRJYf/3JO4SmdxONZdCvq5TJLCvY90D8/LVBlVk736Y79GWm:FUQOJD3i1VkAfnxONnCvq5TJLCvY90DA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49ad1a861e744405ad005d9b32e8dd50N.exe

Files

49ad1a861e744405ad005d9b32e8dd50N.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 262KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ