fa9f8e167ce8bc62e51867f064350b8df96369baedc272c2dddaed665eac50ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa9f8e167ce8bc62e51867f064350b8df96369baedc272c2dddaed665eac50ea
Size

12KB
MD5

0eef1d34f9c107e00d2bdaa92ae10c05
SHA1

82b604267a4ad19b6db0552faa7e9032e838893f
SHA256

fa9f8e167ce8bc62e51867f064350b8df96369baedc272c2dddaed665eac50ea
SHA512

a6a30d0657ee59dbe6ac6c586a929efa647c70ffbc6d6665a86e634aa45d0df91743d118dc294d7ee2d855c67bd32ebb4171c63d68ded881ce637a986ac897c7
SSDEEP

384:dL7li/2zbq2DcEQvdhcJKLTp/NK9xayD:N/M/Q9cyD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa9f8e167ce8bc62e51867f064350b8df96369baedc272c2dddaed665eac50ea

Files

fa9f8e167ce8bc62e51867f064350b8df96369baedc272c2dddaed665eac50ea
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ