e1a422410895777443f2e36a3c12ce96f5325b3d3c5deb83128c095d706108fa | Triage

Sharing

General

Target

e1a422410895777443f2e36a3c12ce96f5325b3d3c5deb83128c095d706108fa
Size

12KB
MD5

a4008aecb4e9a193a845b630f1e94553
SHA1

a6f2007238faef17a71b531266256e0b41f594e6
SHA256

e1a422410895777443f2e36a3c12ce96f5325b3d3c5deb83128c095d706108fa
SHA512

0a882e08056993585963a71ec98ee6b7f2974e35c1dfa18293c758c0eefc49422557064792bfa8295ed41e1dd786705c1e62f59d166c7f33e9bfc42433549750
SSDEEP

384:gL7li/2zNq2DcEQvdhcJKLTp/NK9xaz6:+9M/Q9cz6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1a422410895777443f2e36a3c12ce96f5325b3d3c5deb83128c095d706108fa

Files

e1a422410895777443f2e36a3c12ce96f5325b3d3c5deb83128c095d706108fa
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ