3bf70713f68b2c2e1854007cde0a2461f04d163669796cd9949d5ac2b4217dda | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bf70713f68b2c2e1854007cde0a2461f04d163669796cd9949d5ac2b4217dda
Size

12KB
MD5

c278990859166fc03e6d37230e46db69
SHA1

71d47926156198d1da1c2453edc9be1f1127af78
SHA256

3bf70713f68b2c2e1854007cde0a2461f04d163669796cd9949d5ac2b4217dda
SHA512

405b6f6fd4ba0afd7961a545f85895907e67b9da14580b50a00a5f477b1e9f540981c0f2d5e6e1dd8ccfdae78be4286ce30141a1e8cc08333fce89d6c7502970
SSDEEP

384:+L7li/2zjq2DcEQvdhcJKLTp/NK9xaO3:oHM/Q9cO3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bf70713f68b2c2e1854007cde0a2461f04d163669796cd9949d5ac2b4217dda

Files

3bf70713f68b2c2e1854007cde0a2461f04d163669796cd9949d5ac2b4217dda
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ