634d4dc8a874d62b2b1fc7ac8192d62b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

634d4dc8a874d62b2b1fc7ac8192d62b
Size

92KB
MD5

634d4dc8a874d62b2b1fc7ac8192d62b
SHA1

93cd9df3c1bcdee2d5abcfb30b7acafa314c5d3d
SHA256

e8b251a967d251ef861d6cb6ad1aaccb8f9d08f1697dd5cab611cf96ddb8689b
SHA512

7bb99d30c423957e92efbaaee29e5414bcb5ca6fecc86ca72c8d6e459a8c70da520129f42307d9492611a914c3813a4377f19a878b88db037340c00632deefcb
SSDEEP

1536:Hmq7TsaK70131tIyjZHCG5oBQCTXp2/dFVF/KPqleztRngFfc/MfZsp:1TdK+tpjhCBzSVF/KClUtJekkSp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
634d4dc8a874d62b2b1fc7ac8192d62b

Files

634d4dc8a874d62b2b1fc7ac8192d62b
.dll .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

RunAs

Sections

CODE
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ