ab21578620efa245e12a9ae137053e25e15614989c4a2c9d9c61237becc46cda | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab21578620efa245e12a9ae137053e25e15614989c4a2c9d9c61237becc46cda
Size

240KB
MD5

9b3469d93e51ca989b9a091ef02f10b8
SHA1

103070ea03f79f0a251fbcd94f63f5629aac9e47
SHA256

ab21578620efa245e12a9ae137053e25e15614989c4a2c9d9c61237becc46cda
SHA512

117c267eaa17dbb0a6cfdfb1d7d5ec2f75094b72e7c2989ac75ecc650a158f29ae32b227aebca05ee18873f5980d28f998f67c55ecbcab453d567fd461f46dcb
SSDEEP

6144:QnOsaWsWU9QYXCbzFKXnKEjnTReZ/Eo4TpTM5mPnAUltSy6IP7XA1wPtvg1:QnOfWsWU9QPbzanKEjnoZ8o4TpTM5mPe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab21578620efa245e12a9ae137053e25e15614989c4a2c9d9c61237becc46cda

Files

ab21578620efa245e12a9ae137053e25e15614989c4a2c9d9c61237becc46cda
.exe .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ