12f9cb79b7da1fbb4249a96a8272f80e5d9727ac7343b42647b508a62bf3cad2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12f9cb79b7da1fbb4249a96a8272f80e5d9727ac7343b42647b508a62bf3cad2
Size

76KB
MD5

44aada6315bd52cd1cd63a9ab1f316b6
SHA1

7521b50c053ede75a32a84a0bb0aa460cf366b96
SHA256

12f9cb79b7da1fbb4249a96a8272f80e5d9727ac7343b42647b508a62bf3cad2
SHA512

257a3b17395299299d68d279687a1d1849ff64a08ddfaf6ce0ce0e139eb9382da1e7b19411ba67eed55a7dc712836b30afab06f0e1fdd395af63c406daf47af1
SSDEEP

1536:f1Tzy48untU8fOMEI3jyYfPiuOgu6j9sE8:NzltUeOsa+u6j9sE8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12f9cb79b7da1fbb4249a96a8272f80e5d9727ac7343b42647b508a62bf3cad2

Files

12f9cb79b7da1fbb4249a96a8272f80e5d9727ac7343b42647b508a62bf3cad2
.exe .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ