aac13997cd36c8a563e509c76ff2bec69af9e09e61b24911c99c5995a30c0f42 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aac13997cd36c8a563e509c76ff2bec69af9e09e61b24911c99c5995a30c0f42
Size

97KB
MD5

c4ae9c61925b37b57b63340829b093ec
SHA1

850282b7ff31f44825e9fd008dff6d33d88dc56b
SHA256

aac13997cd36c8a563e509c76ff2bec69af9e09e61b24911c99c5995a30c0f42
SHA512

8618d9a0805bc07ae2592a8f712556d06ad2897f3d0180d9933fc671bd00c046ff188241b7aff8f2b8c0f75b3eda529d5297e88c55b7ce21d8e466b57fc7316f
SSDEEP

1536:Fk1vzy48untU8fOMEI3jyYfPiuOu2/lAVyIB:FOzltUeOsaU2etB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aac13997cd36c8a563e509c76ff2bec69af9e09e61b24911c99c5995a30c0f42

Files

aac13997cd36c8a563e509c76ff2bec69af9e09e61b24911c99c5995a30c0f42
.exe .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE