9cf5497db9b4f213048cf3301e24194981b23ad982938ba91775af860560b8e9 | Triage

Sharing

General

Target

9cf5497db9b4f213048cf3301e24194981b23ad982938ba91775af860560b8e9
Size

12KB
MD5

6f8008a392ad15deaea9fccf4bd4fe4a
SHA1

50c34f05cf45db61cf0cb117c8ec905b90bf7265
SHA256

9cf5497db9b4f213048cf3301e24194981b23ad982938ba91775af860560b8e9
SHA512

c3a253b834d2e88be4885d0a5f833a0423086f082f6d23eefe37cc23cbb0f18997517f6a7372c953edcf2fd64bf16f27132a21a9b45faa91b9142cf876cc2d41
SSDEEP

384:VL7li/2z9q2DcEQvdhcJKLTp/NK9xafv:1FM/Q9cfv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9cf5497db9b4f213048cf3301e24194981b23ad982938ba91775af860560b8e9

Files

9cf5497db9b4f213048cf3301e24194981b23ad982938ba91775af860560b8e9
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ