e1d01418b1b484c79722867b899504698aedf6896574db48472e4076a7cde995 | Triage

Sharing

General

Target

e1d01418b1b484c79722867b899504698aedf6896574db48472e4076a7cde995
Size

12KB
MD5

39968dfa2955597fbe13f09c875a8598
SHA1

e9dc09874541344cb92b9e79fc0d6454ee4551cd
SHA256

e1d01418b1b484c79722867b899504698aedf6896574db48472e4076a7cde995
SHA512

b8a4a6c9d889915691017c5bf7c44c3529943e4b82d06e3e3dc0f18e2fb8544c147b8122ed54560ff1a19a2b76e69efffb958c2d84102fd4f41a3834ddea5b14
SSDEEP

384:oL7li/2zqq2DcEQvdhcJKLTp/NK9xakE:WiM/Q9ckE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1d01418b1b484c79722867b899504698aedf6896574db48472e4076a7cde995

Files

e1d01418b1b484c79722867b899504698aedf6896574db48472e4076a7cde995
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ