b4f397a5d9c0cab9e9345e5be480a3be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4f397a5d9c0cab9e9345e5be480a3be
Size

862KB
MD5

b4f397a5d9c0cab9e9345e5be480a3be
SHA1

fed6ecbe0fec7c921426d2a8543be6e0a782290f
SHA256

f784a35dd8a52aae2f634d14b9cfc37471732b0a899830c375f89ce0f207d1f2
SHA512

8ab7359fdfbfc94d72d86b7d190231dbf6fd9df5a88fe005578405a351a919ab4ac00ccfea63b22bfd128b82f763443d6948621d3aab34fdc41f7de3bab7d08e
SSDEEP

12288:+tajZcbVUi3gpReLa849Z0RaPwTW//xZFCDMqnGkbQf7fl4RI/fMc5lNihr1:E7P8SP4kaPwTKZeDk6Qf7fl4SfZnMJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/70654 SSEBACT.exe

Files

b4f397a5d9c0cab9e9345e5be480a3be
.rar .ps1 polyglot
70654 SSEBACT.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 811KB - Virtual size: 810KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ