6d9b479b15ece132b4007b5d17e3d022e54e189e8ed811ba5e7d26ad12c12c1f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d9b479b15ece132b4007b5d17e3d022e54e189e8ed811ba5e7d26ad12c12c1f
Size

12KB
MD5

7e579c06a2a7edd9b9179d412e21b8cc
SHA1

27292681593ef901e857edae98ca055431a0d872
SHA256

6d9b479b15ece132b4007b5d17e3d022e54e189e8ed811ba5e7d26ad12c12c1f
SHA512

c7c4f98e05f7342dde23422e3c18e28de2571ec5dca5f11e3e45546903572e1901cddc4f436df03967666f56222d3beee3015090b8f6c0cd456caca288ed1d33
SSDEEP

384:mL7li/2z0q2DcEQvdhcJKLTp/NK9xaobtY:AoM/Q9cobtY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6d9b479b15ece132b4007b5d17e3d022e54e189e8ed811ba5e7d26ad12c12c1f

Files

6d9b479b15ece132b4007b5d17e3d022e54e189e8ed811ba5e7d26ad12c12c1f
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ