541605f07b3d79211f1b3709996dc02d | Triage

Sharing

General

Target

541605f07b3d79211f1b3709996dc02d
Size

32KB
MD5

541605f07b3d79211f1b3709996dc02d
SHA1

6adf42adbd5d7907492cff5099f2dbd37ba01360
SHA256

bdd826b1fb4a70b029efeaf3f23387cb96ab02b23954d94325b53c3570602f84
SHA512

c28121d9f24167f57d595737c0adc309d7a1f00e9665277f5a2f3d9391ebb8d41c93e97c94dcc8b9a27d346bb0114563b284afd4b5578b2e936b99332b35f3e9
SSDEEP

768:XN2+nxbiHfZs/1VFWvzNJ/o3jJXiblhWcg/QoUIre8f:Xk+xSheVmDYwWcQUINf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
541605f07b3d79211f1b3709996dc02d

Files

541605f07b3d79211f1b3709996dc02d
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f71ba46b26109f5a594c9c1d44602a18

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

BitBlt
CreateColorSpaceW
CreateDIBitmap
CreateICW
CreateMetaFileW
CreatePalette

msvcrt

_CIasin
_mbcasemap
_mbsinc
_mbsnicmp
_mbsncmp

Sections

.text
Size: 21KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE