6b72e240f94353d7d24ba05f1876a18249707d42358c7108529800ef6d96556a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6b72e240f94353d7d24ba05f1876a18249707d42358c7108529800ef6d96556a
Size

12KB
MD5

006a6d185b7ebd54b5d8d14e01a7a0fd
SHA1

69e27771c4bee9dad8b0f472364afdba92ea67d6
SHA256

6b72e240f94353d7d24ba05f1876a18249707d42358c7108529800ef6d96556a
SHA512

093da4386bbf27351b718c0aaadef7d1f0c5fcc45b25b7050a2cc22b0aaac9ceedaf03af798c855efad836c3e8205b3788a6396542f7f9d1ae25f08a4a2977e5
SSDEEP

384:BL7li/2zlq2DcEQvdhcJKLTp/NK9xa7W+:hlM/Q9c7W+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6b72e240f94353d7d24ba05f1876a18249707d42358c7108529800ef6d96556a

Files

6b72e240f94353d7d24ba05f1876a18249707d42358c7108529800ef6d96556a
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ