3efab30614cd4f786a3b61ae125e33ecfee246dae0ab589fa596d5fc7d580371 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3efab30614cd4f786a3b61ae125e33ecfee246dae0ab589fa596d5fc7d580371
Size

332KB
MD5

071cd414686060496bb934c95bc88ae7
SHA1

49f3f32f730ed61640557ec7822d854eb14c77d1
SHA256

3efab30614cd4f786a3b61ae125e33ecfee246dae0ab589fa596d5fc7d580371
SHA512

5f9bdd554d502fdd104f80166343409edb50ecf109c5c77c6e9f0c1ef921588004a6a49f99a1b5b79ff58cf9cc8e8c1f6e072cf839747a9b18e3f47e12a37cf6
SSDEEP

6144:enOsa1b9PlVYAU5s5UB34aiHWh50kh+u4Cbgkswr4wI5ccNuek+xQc2idClEctYG:enOf7dVQ5s5OoaiWhCkL4n+r4wISIk+c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3efab30614cd4f786a3b61ae125e33ecfee246dae0ab589fa596d5fc7d580371

Files

3efab30614cd4f786a3b61ae125e33ecfee246dae0ab589fa596d5fc7d580371
.exe .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE