94b839879b8af7b5b046de36633ec10fc5c27cba045a41849fde1573fa11eed2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94b839879b8af7b5b046de36633ec10fc5c27cba045a41849fde1573fa11eed2
Size

12KB
MD5

1725ad61b894124dff51ece269cf3797
SHA1

63d15f6b88fb15c7a79f436ebf6e2c9c849c4029
SHA256

94b839879b8af7b5b046de36633ec10fc5c27cba045a41849fde1573fa11eed2
SHA512

b8b21e90065b5355d9a02d79b5a9d4b762f44c6f4538a4e52a93b592360b21e26b54abbe1f88c7716791adc07be5d300c4ecab8b3949eeecd089a8adabad3d58
SSDEEP

384:HL7li/2z4q2DcEQvdhcJKLTp/NK9xaP7:rUM/Q9cP7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94b839879b8af7b5b046de36633ec10fc5c27cba045a41849fde1573fa11eed2

Files

94b839879b8af7b5b046de36633ec10fc5c27cba045a41849fde1573fa11eed2
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ