be3d59885bfd6bb7abc36fc796aceede65e1b341181e19b1b5fb3f66834496de | Triage

Sharing

General

Target

be3d59885bfd6bb7abc36fc796aceede65e1b341181e19b1b5fb3f66834496de
Size

12KB
MD5

d98bd69370b050f9af94826bf30b8ad4
SHA1

90f06683b156ddbdd0816af19450830ba3aaa903
SHA256

be3d59885bfd6bb7abc36fc796aceede65e1b341181e19b1b5fb3f66834496de
SHA512

60fd3a002d821dec9c2abc836868238ec6780238faa521d54ef8060178569d15281adf84f30450a00625c1bd0a6704ffd55f38d8956ba61f7dcfd50faacb8ba2
SSDEEP

384:5L7li/2zQq2DcEQvdQcJKLTp/NK9xaP+:JEMCQ9cP+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be3d59885bfd6bb7abc36fc796aceede65e1b341181e19b1b5fb3f66834496de

Files

be3d59885bfd6bb7abc36fc796aceede65e1b341181e19b1b5fb3f66834496de
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ