1fd4e06080df51749dc02bb27a9d4d211feedf289ef6179ec6fe18d26cf57944 | Triage

Sharing

General

Target

1fd4e06080df51749dc02bb27a9d4d211feedf289ef6179ec6fe18d26cf57944
Size

12KB
MD5

0eae9145c5ddcd1953dffe1f3a895a23
SHA1

26818c1ec8b7ca067c18663331881e54f8900136
SHA256

1fd4e06080df51749dc02bb27a9d4d211feedf289ef6179ec6fe18d26cf57944
SHA512

b4728fa76554f7a5439cdb3d0493e6a76331c832e2469957144dc8d6deecb7f4c63eeec420f4f9882d2e937cced4801a6bbcf43a93539198e1bcedd743eb6fc8
SSDEEP

384:3L7li/2zCq2DcEQvdQcJKLTp/NK9xaE9:7KMCQ9cE9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fd4e06080df51749dc02bb27a9d4d211feedf289ef6179ec6fe18d26cf57944

Files

1fd4e06080df51749dc02bb27a9d4d211feedf289ef6179ec6fe18d26cf57944
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ