fb45662cd180f0831844642d7fbba8af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb45662cd180f0831844642d7fbba8af
Size

385KB
MD5

fb45662cd180f0831844642d7fbba8af
SHA1

997559058c68373df74926d9b96c3d816077655c
SHA256

2c88d571ab1e76cb1604ff75eebf0f2d4775f8d485c21c84995bf2be9033c725
SHA512

9cf255b368c03f3a36cff65472f80cb758219c2653c0869bb7733c1a36e72adde8848a8990bfc064730210b17189e595878c7b76700df816e2fd3f75b5fdf825
SSDEEP

6144:nKFEVWB9VW/YWq6JPieTYXdUaZYtU5XuUl3FfOaTQfiy3oCB:KWcB9A/XH+XlZyUQUl3FfJQ67CB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb45662cd180f0831844642d7fbba8af

Files

fb45662cd180f0831844642d7fbba8af
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ