158ccea76165cabdec83e26e35d6ea58 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

158ccea76165cabdec83e26e35d6ea58
Size

385KB
MD5

158ccea76165cabdec83e26e35d6ea58
SHA1

f8e99366e903c5c7d4a57dec9c6be14896996cb6
SHA256

04adf5f747b27f18057796814e0875073a3af3ad9ee79bc942f201b8ed130435
SHA512

0b3f50d6453da90d75560d4cf46f27c813cb2969852946a06876a6c07d880f5ca51c341970564eb902a0e79e883c1c8aab875f7930e4f09420e3552efab3988f
SSDEEP

6144:tPHWWgrKPmKlrPNYVr3wKcwDjX3Q/qjeohEqhkVO58w0Dpq/BK+/B:tPHWWgr8jPGVrzj3gexWVO58w0R+/B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
158ccea76165cabdec83e26e35d6ea58

Files

158ccea76165cabdec83e26e35d6ea58
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ