a1ba3200df763775fb308093cd7ba0dcf2cca7c90dcd958fd2b979096c1fe416 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1ba3200df763775fb308093cd7ba0dcf2cca7c90dcd958fd2b979096c1fe416
Size

312KB
MD5

8323d322a440f7bd3f5244dc36e13e55
SHA1

061b440976e653e8caee796b767d2da7e4e1a3cf
SHA256

a1ba3200df763775fb308093cd7ba0dcf2cca7c90dcd958fd2b979096c1fe416
SHA512

317fcd352258b3513db1bdffda11d2fd8e8d052ddf0c4179c630c1ef8f8212355c7a66df97d40500909bc4259fb844753e94b077eea2542ef891a83e03e850f0
SSDEEP

6144:qnOsaRb9PlVYAU5s5UB34aiHWh50kh+u4Cbgkswr4wI5ccNuek+xQc2idClEctYm:qnOffdVQ5s5OoaiWhCkL4n+r4wISIk+4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1ba3200df763775fb308093cd7ba0dcf2cca7c90dcd958fd2b979096c1fe416

Files

a1ba3200df763775fb308093cd7ba0dcf2cca7c90dcd958fd2b979096c1fe416
.exe .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ