35f6c833344a60cc885b4f9807dea1000695ff63c48b03f5cb199c79f399f16c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35f6c833344a60cc885b4f9807dea1000695ff63c48b03f5cb199c79f399f16c
Size

55KB
MD5

39dd90d9df18f6aaf7db0f66c167f24d
SHA1

5de9d9dafeeeef0ac86753fe807fe53c454769ca
SHA256

35f6c833344a60cc885b4f9807dea1000695ff63c48b03f5cb199c79f399f16c
SHA512

fa9176a65a1b8769f9a20549d02e59a69a70a704d875c261f2ce3dec9672a3dcec7ec803d06e0ff6d33b7d098a528b1eb04f79fd209f2e1457d4600e3f9322eb
SSDEEP

768:rCru/f9Uw/E6zy4n8uZ5tUXMJ+fROUmELY2glEbM3j+rd+fpRfLTWLReOOgu6:fRTzy48untU8fOMEI3jyYfPDEOgu6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35f6c833344a60cc885b4f9807dea1000695ff63c48b03f5cb199c79f399f16c

Files

35f6c833344a60cc885b4f9807dea1000695ff63c48b03f5cb199c79f399f16c
.exe .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ