5b8a0e57aec6b7c925405c6079cf2d8d56d8721cff8eece4b61fce578510e600 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b8a0e57aec6b7c925405c6079cf2d8d56d8721cff8eece4b61fce578510e600
Size

12KB
MD5

8899462b9cd38206693368c14710b4a7
SHA1

700bb55ede2dc3921426cdf8a0ed28c7fb0855b5
SHA256

5b8a0e57aec6b7c925405c6079cf2d8d56d8721cff8eece4b61fce578510e600
SHA512

853b23bd04a6264d94b1ae9c151bc76a6f46084cc6904a2fd5cf930b93ef8eb9ed93753343b532b74b48874e37ec9fa373133115c15d79a1039412661d48b65f
SSDEEP

384:YL7li/2zSq2DcEQvdfcJKLTp/NK9xatf:mCMZQ9ctf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b8a0e57aec6b7c925405c6079cf2d8d56d8721cff8eece4b61fce578510e600

Files

5b8a0e57aec6b7c925405c6079cf2d8d56d8721cff8eece4b61fce578510e600
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ