1a4d20a472cf9044071442a5b563278fc5cdc622673eba056de1e5b50a6d1078 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a4d20a472cf9044071442a5b563278fc5cdc622673eba056de1e5b50a6d1078
Size

12KB
MD5

ec809454a2cfc77aef80773b6ff5c6d9
SHA1

5e652d6bea5614948413d358a7fe9fb08efd8ebe
SHA256

1a4d20a472cf9044071442a5b563278fc5cdc622673eba056de1e5b50a6d1078
SHA512

da70df99e664a62f4ae16e1088132f0dca94fc01a7441f25a6b61f91bea013e8dd2910a4ccdd0c9d37b196ff18768a02f35b5b22fd7cc9aa07adbe2285ef5db1
SSDEEP

384:2L7li/2zAkq2DcEQvdhcJKLTp/NK9xaC8:w80M/Q9cC8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a4d20a472cf9044071442a5b563278fc5cdc622673eba056de1e5b50a6d1078

Files

1a4d20a472cf9044071442a5b563278fc5cdc622673eba056de1e5b50a6d1078
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ