56ab50a616ec716bff64babe21ad43e051f977cea6f4e4bc4f1c267ae1ac2eca | Triage

Sharing

General

Target

56ab50a616ec716bff64babe21ad43e051f977cea6f4e4bc4f1c267ae1ac2eca
Size

12KB
MD5

752cf226e0e38568f166ef02442f401b
SHA1

f26b2442eef34a84e0582f489f2671c5b1e48fc6
SHA256

56ab50a616ec716bff64babe21ad43e051f977cea6f4e4bc4f1c267ae1ac2eca
SHA512

ce9c21e119e3099c1ad7ff5db4c9f365509e01cc2f79c884a36065bc56b5452180e294010e9b6ff43796f66be37ed8d197b84338a82042f78a084e022ed8c283
SSDEEP

384:dL7li/2zIq2DcEQvdQcJKLTp/NK9xaYC:NUMCQ9cYC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56ab50a616ec716bff64babe21ad43e051f977cea6f4e4bc4f1c267ae1ac2eca

Files

56ab50a616ec716bff64babe21ad43e051f977cea6f4e4bc4f1c267ae1ac2eca
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ