ff1b51f2bd46893c2570d260c2814757ebc8bda41421e1dc63fc5cbdf7c2e823 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff1b51f2bd46893c2570d260c2814757ebc8bda41421e1dc63fc5cbdf7c2e823
Size

88KB
MD5

ac7c8899ec6c4353d8aedf6ab04dd891
SHA1

3a74fce5a1a29f4bb47569df7d8dced4e563b0d9
SHA256

ff1b51f2bd46893c2570d260c2814757ebc8bda41421e1dc63fc5cbdf7c2e823
SHA512

41bf2c53a0bd1443bdc5e210738879f07f02a420172e14545c8ea2a35dc6c79eda307da7e4427ae15d1a326a58b2e7ece7baa89af26423c6ed025c63e9fcdd60
SSDEEP

1536:Gc1Tzy48untU8fOMEI3jyYffiuOD2/lUVyIv:GWzltUeOsK52ytv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff1b51f2bd46893c2570d260c2814757ebc8bda41421e1dc63fc5cbdf7c2e823

Files

ff1b51f2bd46893c2570d260c2814757ebc8bda41421e1dc63fc5cbdf7c2e823
.exe .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ