199d599d76f949e4ee1f6d198d036627 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

199d599d76f949e4ee1f6d198d036627
Size

506KB
MD5

199d599d76f949e4ee1f6d198d036627
SHA1

af236705e07da1279e8ba1369964c5bd506d3c2e
SHA256

cf1424ed5885b1b21101c3fc2ef44b7ca491f98b53d3c0cef0f2446e0a5fc812
SHA512

fb40bf1c26b4f2294f54404935e611b94cf06410778866c9bd6df7cca37bfbbe8fcbcf9013917a085f24d1298efb3ad4cced1571bb39bba25c014007a5f90dd9
SSDEEP

12288:8aJnc4GmVNohJX+NQ6J6LPeSI1mnz7BXbW2+:pJnc4XVahJX+G6kSSI1Uz71Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
199d599d76f949e4ee1f6d198d036627

Files

199d599d76f949e4ee1f6d198d036627
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 475KB - Virtual size: 474KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ