4414cd5a9811d807330aa04f84e41041e54d8bd0b14e095877c42717da624e87 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4414cd5a9811d807330aa04f84e41041e54d8bd0b14e095877c42717da624e87
Size

12KB
MD5

14321ebc25c863a1076e7e1c45129857
SHA1

bda2b9fa130f8d71fa5cbf0b8d557a72c28e2704
SHA256

4414cd5a9811d807330aa04f84e41041e54d8bd0b14e095877c42717da624e87
SHA512

3f0bc635159531027c1f892b173bbed8ed77d9f3d431900508e36234aed3bfee494cd24932664cbe20983f6633ec7b3ec9026d58f71caf9cb1e5962bfd0468ec
SSDEEP

384:oL7li/2z0q2DcEQvdhcJKLTp/NK9xaz2:WQM/Q9cz2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4414cd5a9811d807330aa04f84e41041e54d8bd0b14e095877c42717da624e87

Files

4414cd5a9811d807330aa04f84e41041e54d8bd0b14e095877c42717da624e87
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ