881260b53e71d0a08870bc2cc473dac74d1f32d418a030dc4db0f105c3f5ea83 | Triage

Sharing

General

Target

881260b53e71d0a08870bc2cc473dac74d1f32d418a030dc4db0f105c3f5ea83
Size

12KB
MD5

70b79c42ae595fe214e60a96c7881ca0
SHA1

5f336d3147256b633c1b9c09c3132f3ea199c967
SHA256

881260b53e71d0a08870bc2cc473dac74d1f32d418a030dc4db0f105c3f5ea83
SHA512

2ffe1e2c166c1c963e8133778e98f213aefc06ee6b61a3a0a332ea3301d1e3a3fe8324bb81531ae482a29d1d07167fbb86b24e8e4e939643cbdd98a4f150c54b
SSDEEP

384:jL7li/2zWq2DcEQvdhcJKLTp/NK9xazx:nOM/Q9czx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
881260b53e71d0a08870bc2cc473dac74d1f32d418a030dc4db0f105c3f5ea83

Files

881260b53e71d0a08870bc2cc473dac74d1f32d418a030dc4db0f105c3f5ea83
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ