096a46f5bd1af7f01963570f782781d9 | Triage

Sharing

General

Target

096a46f5bd1af7f01963570f782781d9
Size

886KB
MD5

096a46f5bd1af7f01963570f782781d9
SHA1

97782cfc6b6fc9fbabde3e2b0466d5ea3c166b40
SHA256

062030f669c1842a87dde6d5965e24ab85001311e0d6000d347099beb90a0fd0
SHA512

5da54e21e0fea77bb4683d5fbd5cdce368f9e19d2e1c444ab7f4d41f1446673ca24601ded4b89c6af98bbaba612f87c92374d34bc8cdfaa381012ca193190dc1
SSDEEP

24576:GHn1mTeeaqvcedGM8upLbgkT975560VwTpm+pr1:a1mSP6Fy2rjCTpmy1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
096a46f5bd1af7f01963570f782781d9

Files

096a46f5bd1af7f01963570f782781d9
.exe .vbs windows:5 windows x86 arch:x86 polyglot

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 607KB - Virtual size: 607KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 503KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uro
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE