caf6f12454c85eecc97d3c7f596b61b9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

caf6f12454c85eecc97d3c7f596b61b9
Size

226KB
MD5

caf6f12454c85eecc97d3c7f596b61b9
SHA1

c1e52d68482db51e8fbbee95ef6db9c8e3a28cd2
SHA256

3106ee196e2d1abd497f77676f073365327744ee64511133f5053bcd34bd7c8d
SHA512

fd5dff88fc4ffc5be61662316f576501cb17daae512ae7fc918689619d8d30d876b985447a62dbcc333749a52a01dfede35319a031f2d89b058fd09b11ebdd75
SSDEEP

6144:GQRAOO93y4bF6ruPbJNW8if0HoGvc60p91eWvy:GQCtdy4bF6q7Boul0tjy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
caf6f12454c85eecc97d3c7f596b61b9

Files

caf6f12454c85eecc97d3c7f596b61b9
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.code
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 221KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ