54187367336606d22d767fca2738e3253f174459ed119099efe594a73cc15cb2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

54187367336606d22d767fca2738e3253f174459ed119099efe594a73cc15cb2
Size

12KB
MD5

ad455afca197e001e46a02c5d8608c32
SHA1

7dfcf5c40379fe77164d583a8fe2f07eb6f19de5
SHA256

54187367336606d22d767fca2738e3253f174459ed119099efe594a73cc15cb2
SHA512

93e2456ce816068606a9e89804d2570e7d321747fb370d5a4221c7117409ecb072361a17c85a150302beba6f17115a61c396ab3561de42fc9974c9a102724bae
SSDEEP

384:XL7li/2zbq2DcEQvdhcJKLTp/NK9xa2O3:bfM/Q9c2O3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54187367336606d22d767fca2738e3253f174459ed119099efe594a73cc15cb2

Files

54187367336606d22d767fca2738e3253f174459ed119099efe594a73cc15cb2
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ