4f49f10e0e3c8aa40a36b23da354a31819010d2e50d8dd5938e0602ee13c7188N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f49f10e0e3c8aa40a36b23da354a31819010d2e50d8dd5938e0602ee13c7188N
Size

97KB
MD5

ef6a1eee48f4c86a18f3c51f9c783260
SHA1

0170ace4385ec40601a40334891dd6ac7af27da7
SHA256

4f49f10e0e3c8aa40a36b23da354a31819010d2e50d8dd5938e0602ee13c7188
SHA512

5d2ff85e7498e796faf92dfce7f25a32b2b065cdb39596b0882ac267d7a620c7e2d00c4fadadfcdc56578a123a5ff0e29b26a2127ed6a6bc8d645e43f24d9354
SSDEEP

1536:ROVvKxCWzy+P3huwiAfq/8ICR+E0/eKdSHvLkCYtkR:0Uz1P3RiAo8ICM/GLkBtkR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f49f10e0e3c8aa40a36b23da354a31819010d2e50d8dd5938e0602ee13c7188N

Files

4f49f10e0e3c8aa40a36b23da354a31819010d2e50d8dd5938e0602ee13c7188N
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ