2c971a345d8b1acf16dddb6225f66e2f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c971a345d8b1acf16dddb6225f66e2f
Size

24KB
MD5

2c971a345d8b1acf16dddb6225f66e2f
SHA1

c938e20def8a0edc762846916b25dcd4e372b0a8
SHA256

b42153b09b4c44611ecb7b4a1c5f91c06aed547a555a18982b0641ade338b3da
SHA512

26ab5ce57cb87bbaa543fecd4099c1a471a807da4b069430f83efbce60d9fd1c511d37c20c43b845ff4191d886388fa4a0d8e7d67e3aa26f7116e36ab8a886f1
SSDEEP

384:iSEWoyqFfSLZ0WwK8HZxMJobD31GDv5h5MwvY5B5X55V5pgT:iRWpGfEZWZIobwHeGY5B5X55V5OT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c971a345d8b1acf16dddb6225f66e2f

Files

2c971a345d8b1acf16dddb6225f66e2f
.exe .js windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ