0a1534e649064cde07fb82d6be590bad7d7fac811ed297b5f282d40125725b73 | Triage

Sharing

General

Target

0a1534e649064cde07fb82d6be590bad7d7fac811ed297b5f282d40125725b73
Size

63KB
MD5

6d4c9d750cc1a56abd7bc252111ba6cc
SHA1

c789986233e7b6160e4d06c9810a0d96535ba1ed
SHA256

0a1534e649064cde07fb82d6be590bad7d7fac811ed297b5f282d40125725b73
SHA512

35dddef9a09dfdf6a68be61060f96342822c938ca31919392c198cd66cc62d369ff2ddad6a236ba351d1788acd1a7de4272999d535112e7591c763d1094a320d
SSDEEP

768:SCru/f9UwfE6zy4n8uZ5tUXMJ+fROUmELY2glEbM3j+rd+fpkXVTWkReOOq:GRzzy48untU8fOMEI3jyYf6llOq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a1534e649064cde07fb82d6be590bad7d7fac811ed297b5f282d40125725b73

Files

0a1534e649064cde07fb82d6be590bad7d7fac811ed297b5f282d40125725b73
.exe .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ