044d0285bfd3c1f3999d972ed29de565a2530454fa6890c732d42fc0521ccde4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

044d0285bfd3c1f3999d972ed29de565a2530454fa6890c732d42fc0521ccde4
Size

12KB
MD5

c7cd3ad492f81918381afb6aaf251416
SHA1

21423b1ca35942e1ee73b03e262f13fb93918b07
SHA256

044d0285bfd3c1f3999d972ed29de565a2530454fa6890c732d42fc0521ccde4
SHA512

fe8c676e7e5c7b0e479a3d8935b403d915a402f3213a0d1026d951955bb17398d657bcec5ac7e497bb2f3f0128893c39c80b7e6ad8eeceb95c6b2caf4b869401
SSDEEP

384:8L7li/2zAq2DcEQvdQcJKLTp/NK9xaR3:aMMCQ9cR3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
044d0285bfd3c1f3999d972ed29de565a2530454fa6890c732d42fc0521ccde4

Files

044d0285bfd3c1f3999d972ed29de565a2530454fa6890c732d42fc0521ccde4
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ