d52e76d6c0432370cfc989a8f291959de725148dcc63e03c174768f138241912 | Triage

Sharing

General

Target

d52e76d6c0432370cfc989a8f291959de725148dcc63e03c174768f138241912
Size

12KB
MD5

b8b66f027fe151bb2fafa2d1b5d35b28
SHA1

9eaaafb01b66f61258fe60bd17014da6f68df2e9
SHA256

d52e76d6c0432370cfc989a8f291959de725148dcc63e03c174768f138241912
SHA512

f6698e5192add624018b2a842e5a90d5e15f92d8c2659963622a97d79227e9f048f46fe1d681b47018eba6ea10cd763dc3812d10a895a345cc4352766a5b111a
SSDEEP

384:BL7li/2zMq2DcEQvdQcJKLTp/NK9xalW:hIMCQ9clW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d52e76d6c0432370cfc989a8f291959de725148dcc63e03c174768f138241912

Files

d52e76d6c0432370cfc989a8f291959de725148dcc63e03c174768f138241912
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ