c65194d0ae81c73a9a28a2cc390bfc14bdb9c940809fabcf275887ab9fecbfa2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c65194d0ae81c73a9a28a2cc390bfc14bdb9c940809fabcf275887ab9fecbfa2
Size

12KB
MD5

98bed1728f253931f333148133debbe6
SHA1

07736da81f1ae20195c39b9a45fe5018e5b2469d
SHA256

c65194d0ae81c73a9a28a2cc390bfc14bdb9c940809fabcf275887ab9fecbfa2
SHA512

83b29281ebac0e4cfe3959d605d77412f2a3a928fbfbb038d87c446d830e99e35ce8a5d1cbcf9b913969ccb73793f7a0e9bfd95de7b9c425171b325f1b32936e
SSDEEP

384:UL7li/2zmq2DcEQvd2cJKLTp/NK9xaWQ:CuM8Q9cWQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c65194d0ae81c73a9a28a2cc390bfc14bdb9c940809fabcf275887ab9fecbfa2

Files

c65194d0ae81c73a9a28a2cc390bfc14bdb9c940809fabcf275887ab9fecbfa2
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ