ab3434870dcfa6782eda146a76d70bed05e1693c43ab228abc3fb99e7ab945c9 | Triage

Sharing

General

Target

ab3434870dcfa6782eda146a76d70bed05e1693c43ab228abc3fb99e7ab945c9
Size

12KB
MD5

58eec028c16c94111b4c77885a41a12c
SHA1

a1824748cc91053a835e6b2187c4c0f386eae583
SHA256

ab3434870dcfa6782eda146a76d70bed05e1693c43ab228abc3fb99e7ab945c9
SHA512

dc1e60c9e48fd020732a911787cd5352381a85f91f53b329c12206f2bf8b1a04fbef3a25341c62e211feac6546bac41e32cdd5313d7cd05b6bed727408c99a6a
SSDEEP

384:oL7li/2zRq2DcEQvdQcJKLTp/NK9xajL:WxMCQ9cjL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab3434870dcfa6782eda146a76d70bed05e1693c43ab228abc3fb99e7ab945c9

Files

ab3434870dcfa6782eda146a76d70bed05e1693c43ab228abc3fb99e7ab945c9
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ