daa940709887688938b439b9af79fe84928d4b43222925764d7e75847dab4c33 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

daa940709887688938b439b9af79fe84928d4b43222925764d7e75847dab4c33
Size

12KB
MD5

a1b1da27a22e210ae895e658e0d0fcc2
SHA1

9cc271975aa3483910eacc212d6a6dc2491fc670
SHA256

daa940709887688938b439b9af79fe84928d4b43222925764d7e75847dab4c33
SHA512

b8507b7cc4937a8e645ee8f82dd769ac067d9628b1dd1be2c8deae859ef29dd3ff34cb0fe2cb4d4f30698970616c2e4449317a34ea33e3dffdb4cc55ce5c10e5
SSDEEP

384:XL7li/2z4q2DcEQvdhcJKLTp/NK9xar10:bUM/Q9cJ0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
daa940709887688938b439b9af79fe84928d4b43222925764d7e75847dab4c33

Files

daa940709887688938b439b9af79fe84928d4b43222925764d7e75847dab4c33
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ