e76a3331d350b7137ab6b1a32da7a26814e4f870daeec0d1f8198eb2390251a1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e76a3331d350b7137ab6b1a32da7a26814e4f870daeec0d1f8198eb2390251a1
Size

12KB
MD5

8073f9ee48b9d4e7c2e51711d4becff2
SHA1

2b9cbc488898068bd29c1bc2a8fa1618693a2859
SHA256

e76a3331d350b7137ab6b1a32da7a26814e4f870daeec0d1f8198eb2390251a1
SHA512

a978eeda652c79a825fc5ff2b4173eb2fa162a0b0c0c50ba5cbd1d52e3017e2426738ccc25cb007cc3fc10d8d0503d65af3c7e98d5d2009afd47f012f2b5a568
SSDEEP

384:0L7li/2zcq2DcEQvdhcJKLTp/NK9xaLm:iYM/Q9cLm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e76a3331d350b7137ab6b1a32da7a26814e4f870daeec0d1f8198eb2390251a1

Files

e76a3331d350b7137ab6b1a32da7a26814e4f870daeec0d1f8198eb2390251a1
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ