1abe196427421cc1acc567d305ac1ff68480896ccd25af1feb25972a16f0f595 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1abe196427421cc1acc567d305ac1ff68480896ccd25af1feb25972a16f0f595
Size

12KB
MD5

d3ddc07f39f4d91cf780057c82d7dce0
SHA1

f7f680007f81f056f64d961de587ada189f80ae5
SHA256

1abe196427421cc1acc567d305ac1ff68480896ccd25af1feb25972a16f0f595
SHA512

5df347e704669e1e48dc6a48c94fc745b753e0936e9e0689e6333088d8b9bd64d62e15f2c2ad3413dff6115710db5eed1bc4256b70b91a5cf8bb85981b91bcde
SSDEEP

384:8L7li/2z1q2DcEQvdhcJKLTp/NK9xacoD:a1M/Q9ccoD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1abe196427421cc1acc567d305ac1ff68480896ccd25af1feb25972a16f0f595

Files

1abe196427421cc1acc567d305ac1ff68480896ccd25af1feb25972a16f0f595
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ