120aa090923fc1b937c522f8ca9c55663a4089dd906c98e8c5a298742113545a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

120aa090923fc1b937c522f8ca9c55663a4089dd906c98e8c5a298742113545a
Size

12KB
MD5

23cacef901ce41c838f43c123ee2998b
SHA1

9abe04738b4e37b3e5441c90613c87ee2f9f4ab4
SHA256

120aa090923fc1b937c522f8ca9c55663a4089dd906c98e8c5a298742113545a
SHA512

f5ba01f7e90fab6625f481bd7ee17e85ee0f706215ac84f073b9c7ca0318f86ce622bc19ae28dead2124cca1d5a08ab318a85d293b71d31e4ebcf5cbddd04abc
SSDEEP

384:sL7li/2z3q2DcEQvdhcJKLTp/NK9xaaT:qDM/Q9caT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
120aa090923fc1b937c522f8ca9c55663a4089dd906c98e8c5a298742113545a

Files

120aa090923fc1b937c522f8ca9c55663a4089dd906c98e8c5a298742113545a
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ