f80e34811844f05ff7f51cdc591bfd683d390195c08af4db4126c3f821d6081a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f80e34811844f05ff7f51cdc591bfd683d390195c08af4db4126c3f821d6081a
Size

12KB
MD5

8ee8c1087da4ad619607d702644d704c
SHA1

0343a3dbd0cb3a04cc933284081dd84d22ae1406
SHA256

f80e34811844f05ff7f51cdc591bfd683d390195c08af4db4126c3f821d6081a
SHA512

996feaa657b17502fd9db1e8205958aa027048f810b4f2a839db71542a7e77510b234d3eca6945d9201b23f251627e3b292d6b5f2e5ddb43c16fc25f1fef2740
SSDEEP

384:BL7li/2zWq2DcEQvdhcJKLTp/NK9xaLw:h2M/Q9cLw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f80e34811844f05ff7f51cdc591bfd683d390195c08af4db4126c3f821d6081a

Files

f80e34811844f05ff7f51cdc591bfd683d390195c08af4db4126c3f821d6081a
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ