e6bb5c14bcff0868e6992bff271369305809e87d40c01b23a59e0d32eac5af39 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e6bb5c14bcff0868e6992bff271369305809e87d40c01b23a59e0d32eac5af39
Size

12KB
MD5

c7895bacf84bd1005fcad82a09f411b5
SHA1

6ed151e3524f9d247a793d6f51375b01a254e07e
SHA256

e6bb5c14bcff0868e6992bff271369305809e87d40c01b23a59e0d32eac5af39
SHA512

6d9bc4f7833ed9cca753e71d923d32be0655635a4c40e2a8fb65e8e741769cc9657f97c81cd47dcca43ae7bb132fd7f83fca1e78efb51f6321836e1f1765705e
SSDEEP

384:uL7li/2z+q2DcEQvdQcJKLTp/NK9xaSw:4GMCQ9cSw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e6bb5c14bcff0868e6992bff271369305809e87d40c01b23a59e0d32eac5af39

Files

e6bb5c14bcff0868e6992bff271369305809e87d40c01b23a59e0d32eac5af39
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ