ef630b77745d17411bd5136e6193fb3403984f6a383ff46da35c9d8d4347ae90 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef630b77745d17411bd5136e6193fb3403984f6a383ff46da35c9d8d4347ae90
Size

12KB
MD5

ea8c300d6967d3076f1134cbd8e72166
SHA1

4f982a16d36b9562248476dfebb54eae42d904e4
SHA256

ef630b77745d17411bd5136e6193fb3403984f6a383ff46da35c9d8d4347ae90
SHA512

98c08b799075e2af6c7f50d2e21f518840c8594d6b1bb835679999f8edbf4ae2905db3fa301d4052e2e257a97989c00e478bc4289ca9f99069c2b9db05e88f06
SSDEEP

384:GL7li/2zEq2DcEQvdhcJKLTp/NK9xaHV:goM/Q9cHV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef630b77745d17411bd5136e6193fb3403984f6a383ff46da35c9d8d4347ae90

Files

ef630b77745d17411bd5136e6193fb3403984f6a383ff46da35c9d8d4347ae90
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ