102b2d3870ef76f4e249bea32183e8aed1ad586f8de7b60896d731a2ffc7e1c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

102b2d3870ef76f4e249bea32183e8aed1ad586f8de7b60896d731a2ffc7e1c5
Size

12KB
MD5

2b00827d7b89491eaca636dea54a3569
SHA1

d9d796df7094cf655a9c3fb0ed6b880f4d962266
SHA256

102b2d3870ef76f4e249bea32183e8aed1ad586f8de7b60896d731a2ffc7e1c5
SHA512

13da695cbd5e9a0d99dace37b708c3b87c2643135db383772b15ae3c455cdf104525c77b4af535dce8feca3d899993d9d279e6a90db404c7bd7329276fccc2a7
SSDEEP

384:xL7li/2zHq2DcEQvdhcJKLTp/NK9xaE9:xbM/Q9cE9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
102b2d3870ef76f4e249bea32183e8aed1ad586f8de7b60896d731a2ffc7e1c5

Files

102b2d3870ef76f4e249bea32183e8aed1ad586f8de7b60896d731a2ffc7e1c5
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ