1d8d883878e4fa4d2667d614464f990a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1d8d883878e4fa4d2667d614464f990a
Size

392KB
MD5

1d8d883878e4fa4d2667d614464f990a
SHA1

9e4433dd7cc8fca520b314d62c381188f5ea82f2
SHA256

06328da052c88dc6a12559a4e12cd96608652077411fc60911ed20d5f2a23a83
SHA512

a85b6e100beae17516c4e5beeb5db09d7b3400bb4c179e145d5f1eb27f2a76b597eb9c21d32e7b1625484815289416571c1f053262d087c933a678389f3ae16b
SSDEEP

6144:y/26kJC3oghja3DpYGaYxKrNV0eS08eMQTtpsp4PnbzuuJBmdzO9eW3s6V7NNJTr:TC4gNobaYoN2eS0ZZiUTJcdzB6NHTr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d8d883878e4fa4d2667d614464f990a

Files

1d8d883878e4fa4d2667d614464f990a
.exe .vbs windows:5 windows x86 arch:x86 polyglot

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 398KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zwt
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE