328bd3db843fbb6b8edf018c4a7c07fc272d87b81059be53071996b0c53d04d5 | Triage

Sharing

General

Target

328bd3db843fbb6b8edf018c4a7c07fc272d87b81059be53071996b0c53d04d5
Size

12KB
MD5

01b71b2c5db5a42ae9ec53f48b43a808
SHA1

3b1c203448b8b53e668d5de21d9fe7ada2a8ae3c
SHA256

328bd3db843fbb6b8edf018c4a7c07fc272d87b81059be53071996b0c53d04d5
SHA512

ad9cc4755d3e9897f9c6a4fc2a1b9cd5cdb4ac5ff8380a9bdef17a5bd6c6e86f8267ff2095bc0813c5eecf5a6a98e4cdb0e0132a9a739db807f46a0d507e7649
SSDEEP

384:9L7li/2ziq2DcEQvdQcJKLTp/NK9xaqR:tyMCQ9cqR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
328bd3db843fbb6b8edf018c4a7c07fc272d87b81059be53071996b0c53d04d5

Files

328bd3db843fbb6b8edf018c4a7c07fc272d87b81059be53071996b0c53d04d5
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ