29bfa3f37b34c8198a92c67c51f707b847c607f2150286c482664df4cfcf7bbe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29bfa3f37b34c8198a92c67c51f707b847c607f2150286c482664df4cfcf7bbe
Size

12KB
MD5

67f12a3aa5e794315d4cd98562e4804b
SHA1

c533a29b46d510781c9aa8af5adb6cb22b3b6aa4
SHA256

29bfa3f37b34c8198a92c67c51f707b847c607f2150286c482664df4cfcf7bbe
SHA512

fe868faf3d3ad097b6c425963f582d166784d6906c46b0a29f979eb3ef224912c091a419f1c6c6b7f5073f3b151c0afdb0d304362b71ea4d4752313a6e20ffba
SSDEEP

384:DL7li/2zgq2DcEQvdQcJKLTp/NK9xaFB:H0MCQ9cFB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29bfa3f37b34c8198a92c67c51f707b847c607f2150286c482664df4cfcf7bbe

Files

29bfa3f37b34c8198a92c67c51f707b847c607f2150286c482664df4cfcf7bbe
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ