822e6feddd9243b13adae58785fb1d687b240089e1909541cccb471840f12e60 | Triage

Sharing

General

Target

822e6feddd9243b13adae58785fb1d687b240089e1909541cccb471840f12e60
Size

12KB
MD5

c0835a8024910279ed2ed7514dc0bb8e
SHA1

7634e6c10e2eaa51ef7d14b719b0a9dc12f0a838
SHA256

822e6feddd9243b13adae58785fb1d687b240089e1909541cccb471840f12e60
SHA512

4b3061d305cba98eb6b1c853d6583b9082ad1cdfd4bdd2e1bf25cc3ba6625c5457b42a64306189541b02d94373b3bef19d71c6619874806123710c55b8e37213
SSDEEP

384:yL7li/2zJq2DcEQvdhcJKLTp/NK9xaTh:spM/Q9cTh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
822e6feddd9243b13adae58785fb1d687b240089e1909541cccb471840f12e60

Files

822e6feddd9243b13adae58785fb1d687b240089e1909541cccb471840f12e60
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ