ac6c99ef4a66e5f78c7dcd6ac3fb8252 | Triage

Sharing

General

Target

ac6c99ef4a66e5f78c7dcd6ac3fb8252
Size

42KB
MD5

ac6c99ef4a66e5f78c7dcd6ac3fb8252
SHA1

6132fd71bfebc5d716d982539741e186f84bac01
SHA256

9571dbd4f7e36a21ef03f3e2a028be2e8ae22150ba5aa994bcb87f5e21deb422
SHA512

08cc43796b98ebc4fa19d4a43305f16092aa89fcb8636561d17cc30e1b587fc7e13bb0e26ad1bf9847939ae1fcace5519991e57650cf050fc3d4e6b963920bd9
SSDEEP

768:gP51zSpgVhdaE8cLgsfSUL+ulztztqZpDHx2w08lX/aIaLB0Bp3j:u1+i38sft+ulZzCpDR2wbX/a6D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac6c99ef4a66e5f78c7dcd6ac3fb8252

Files

ac6c99ef4a66e5f78c7dcd6ac3fb8252
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ