663a3114280f9187839d7561a715e5071074e3b8c216b384f8c0c2885526f36c | Triage

Sharing

General

Target

663a3114280f9187839d7561a715e5071074e3b8c216b384f8c0c2885526f36c
Size

12KB
MD5

cd91751a0c7cbe5e6fa3f6408ea406a2
SHA1

93deb9ba46631c90b28a024fe9af1f2d875ea3f9
SHA256

663a3114280f9187839d7561a715e5071074e3b8c216b384f8c0c2885526f36c
SHA512

00c1091722ed62d20a92571f0760d4f4a544ae53efe207cb35fe3f27b1fd045bc442f6ea5cc4a51b888910923779b701e01b67306abdfd1a48c20d89e1b338fc
SSDEEP

384:VL7li/2zLq2DcEQvdhcJKLTp/NK9xa6D:1fM/Q9c6D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
663a3114280f9187839d7561a715e5071074e3b8c216b384f8c0c2885526f36c

Files

663a3114280f9187839d7561a715e5071074e3b8c216b384f8c0c2885526f36c
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ