4849c0240358a0a03ae81b8f5ceb5277d506aff2572ff9282ee524d42cf5f48d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4849c0240358a0a03ae81b8f5ceb5277d506aff2572ff9282ee524d42cf5f48d
Size

1.1MB
MD5

9e79ca15d2d97b705ba44863483cc7bd
SHA1

77ff1550579c1c83ecbe5d7600f48cebcb76e34a
SHA256

4849c0240358a0a03ae81b8f5ceb5277d506aff2572ff9282ee524d42cf5f48d
SHA512

61194c2198b709a3846a20405689ed3d13733af0c3bdffdd811f58699244adf4a53fc46f2b7cbe08153b0fd0ecd544d0f98c58bebc9658b53cf3bf6c6edb9d25
SSDEEP

24576:jXYYKn2CmMsflMULBknPGUmrx4uFCFaSyaht1HoGCTOQJY:sZAMsfpgPGUmZFKXoGmOWY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4849c0240358a0a03ae81b8f5ceb5277d506aff2572ff9282ee524d42cf5f48d

Files

4849c0240358a0a03ae81b8f5ceb5277d506aff2572ff9282ee524d42cf5f48d
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\版本管理\智健云2020\AHIPClient\ACompress\obj\Debug\ACompress.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ