a07bac8a26a55314c979dedc9a420a297dba01694db32f0038b2ef942c56a7db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a07bac8a26a55314c979dedc9a420a297dba01694db32f0038b2ef942c56a7db
Size

12KB
MD5

e0979c504b803959d0cf3980bd22c833
SHA1

57c665128767197dc8224a159f92563e91ee191c
SHA256

a07bac8a26a55314c979dedc9a420a297dba01694db32f0038b2ef942c56a7db
SHA512

cbb0d9eaa2824a2ab425e26891dfb4759cb695420e9ff550e573ee362b6380a9271d5b2130d39b59cad8848ddf9866b70e347d97a5138ff9caf78953a1c081e1
SSDEEP

384:IL7li/2zKq2DcEQvdQcJKLTp/NK9xa807:2CMCQ9c807

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a07bac8a26a55314c979dedc9a420a297dba01694db32f0038b2ef942c56a7db

Files

a07bac8a26a55314c979dedc9a420a297dba01694db32f0038b2ef942c56a7db
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ