3b989fdd6e87e059c78cbbe158b5160315d0064c06dcf736451ae7ccb7e425f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b989fdd6e87e059c78cbbe158b5160315d0064c06dcf736451ae7ccb7e425f6
Size

12KB
MD5

3f1bcc47a2516bbde2b5558287367bb5
SHA1

c33e368fbae0d66041840d4940ec8b6a9138f1c9
SHA256

3b989fdd6e87e059c78cbbe158b5160315d0064c06dcf736451ae7ccb7e425f6
SHA512

3af5e2c37e68347dfe1b7e805a23d81ae8b1ffa05e8b4c3fa4592cc1a95ac29f68daef6cfaaf491a0b51f48d8069959f53644410bb069dda13b09f340676f516
SSDEEP

384:8L7li/2zlq2DcEQvdhcJKLTp/NK9xaVg:a1M/Q9cVg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b989fdd6e87e059c78cbbe158b5160315d0064c06dcf736451ae7ccb7e425f6

Files

3b989fdd6e87e059c78cbbe158b5160315d0064c06dcf736451ae7ccb7e425f6
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ