ef98308738e0c22c80ad19a0057ce7756c2555849971e26c894369ded8f3c15d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef98308738e0c22c80ad19a0057ce7756c2555849971e26c894369ded8f3c15d
Size

12KB
MD5

93aaeae89cec545d07837b19d221a90f
SHA1

7bf5e29a95f6cbb174056a87440a9736bbbf1ed5
SHA256

ef98308738e0c22c80ad19a0057ce7756c2555849971e26c894369ded8f3c15d
SHA512

6eec1d7e863de1ea264c4ebe265f714771873b740cc785195577688840d544cef520dc8324f5a59d148f8bfe6ae2439ab575a56df94c6af0be7060a6a1b4697c
SSDEEP

384:YL7li/2zWq2DcEQvdQcJKLTp/NK9xaT5:m+MCQ9cT5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef98308738e0c22c80ad19a0057ce7756c2555849971e26c894369ded8f3c15d

Files

ef98308738e0c22c80ad19a0057ce7756c2555849971e26c894369ded8f3c15d
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ