971623013_2845016937_243327151[.]exe | Triage

Sharing

General

Target

971623013_2845016937_243327151.exe
Size

1.2MB
MD5

12cc26878c1d6515184cc8949a5e6876
SHA1

feb1a65792aefc6363b2dc58cf1b55f124a91388
SHA256

488650df0c10124f931aeaef8c1fa525c0795d89ba6e242567c4df82fd51dd9d
SHA512

fa6ba7b414d18cdb1bab1535d82f7d34d540684c6ae08ca7b06b690615808e67f6fabd23a6bce988a759019d3b2b28f06d15480472787f33a1a9b68fd0775ee8
SSDEEP

24576:pQYU7LjIZvfulzis4BA7RYCWrHAfoefoOFyRLnflgNCa4MIM8mB3Bn2qfG/dpJGK:p/Qv6Hw2WNYjzAfoefoOFyllgpr7n2Id

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
971623013_2845016937_243327151.exe

Files

971623013_2845016937_243327151.exe
.exe .ps1 windows:6 windows x64 arch:x64 polyglot

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

wABqjjd{
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RMUIAWYq
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ZFuGKTsH
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE