35b1c849eb309e2a4c3cb17771b45f131c8d67c42dbea59eb1edbd17792454a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35b1c849eb309e2a4c3cb17771b45f131c8d67c42dbea59eb1edbd17792454a6
Size

12KB
MD5

d366feb94444d1ab2d11b40bd055d4f0
SHA1

ae03c3b27eb4bdb8661bfbac389c26c7b5f55c01
SHA256

35b1c849eb309e2a4c3cb17771b45f131c8d67c42dbea59eb1edbd17792454a6
SHA512

a1282294f06cda608de83fc6faa3768987a0b467c9fdb8a1335343b746d66dbe4ed27e5a835f305ea1b6e590bd3cb6971bc7cd8eb5440a1dd339f1ae3fb40e4b
SSDEEP

384:XL7li/2z8q2DcEBvdfcJKLTp/NK9xaQ5:bQDZQ9cQ5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35b1c849eb309e2a4c3cb17771b45f131c8d67c42dbea59eb1edbd17792454a6

Files

35b1c849eb309e2a4c3cb17771b45f131c8d67c42dbea59eb1edbd17792454a6
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ