49b73389617d399ba8bd35ea4afcc73f818498ff2752c9f427d5ee71a1c3200f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49b73389617d399ba8bd35ea4afcc73f818498ff2752c9f427d5ee71a1c3200f
Size

997KB
MD5

245b534b5393f89ad3beb27f6ba7dbcd
SHA1

c1f2be3365114faefa03881a5a43a1c95785d73f
SHA256

49b73389617d399ba8bd35ea4afcc73f818498ff2752c9f427d5ee71a1c3200f
SHA512

8ccf9080f02ac0c1c8610c6c51767c83a2791b5dffc4d52332b3d76e3d3fb70390032a2a1d69cc0c50f347851c96f92cb8d12c39f67ca08f46840b05e77dd6a4
SSDEEP

24576:qW2w7ukxzIbWGWt8gaVyPBtSbUntQVGGJwIsAjjjR:qW8kxzGWL8gaVyPKAtKGG33j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49b73389617d399ba8bd35ea4afcc73f818498ff2752c9f427d5ee71a1c3200f

Files

49b73389617d399ba8bd35ea4afcc73f818498ff2752c9f427d5ee71a1c3200f
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 926KB - Virtual size: 926KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ