3df37859f46be01b08e6e7dd3060f6d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3df37859f46be01b08e6e7dd3060f6d2
Size

524KB
MD5

3df37859f46be01b08e6e7dd3060f6d2
SHA1

5594b9d6d30d705a3a05f9e0d5eb11f6b34b7b5d
SHA256

3892721b8068aff9080965fe5eedf30dd488ef5d08c12234af66a2ca97bfe476
SHA512

492c503744413ab7ef6a2570b316ed36a53aa1a121fb8622fe4574fe611c91788e3d0435fc9013cc40d455d84c6eab940668a68e819debaee785cae53dd2d7c4
SSDEEP

12288:OVr0/yDvpHL3ks7oNZE7KHWfRS+nsKPLOCh+H1:OrLpbd0ANSYaCoH1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3df37859f46be01b08e6e7dd3060f6d2

Files

3df37859f46be01b08e6e7dd3060f6d2
.dll .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Pav
Size: 376KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE