81ed878a4e97e63e2c47baab39450aca19e3978e3593a4257d1762ba066c534e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

81ed878a4e97e63e2c47baab39450aca19e3978e3593a4257d1762ba066c534e
Size

94KB
MD5

656837b57f7b60b15d01e27b5cb11aab
SHA1

71d9433255888a9d9aee3fefecba1103abe0f4f3
SHA256

81ed878a4e97e63e2c47baab39450aca19e3978e3593a4257d1762ba066c534e
SHA512

827e471a1773c411345099718fce443436c915bff90e8e7a719cc4805b6a5c17cc2fa2378b5c3a4dec0da3f206d6864a898b1960b867b6cc9cbb1700a3095b77
SSDEEP

1536:91/zy48untU8fOMEI3jyYf4iuOcQvokKVoX9Ta/:3zltUeOsnmk0oX9A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81ed878a4e97e63e2c47baab39450aca19e3978e3593a4257d1762ba066c534e

Files

81ed878a4e97e63e2c47baab39450aca19e3978e3593a4257d1762ba066c534e
.exe .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ