baf2b0b6475fba741cae74c6d37b6b6c6382a3ccb2c5ff71358f3deac20cbd81 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

baf2b0b6475fba741cae74c6d37b6b6c6382a3ccb2c5ff71358f3deac20cbd81
Size

12KB
MD5

c971282cb4ca6e256d3535f658467dd4
SHA1

075bc3aabf4e5e3d21bbf6956006944b55929361
SHA256

baf2b0b6475fba741cae74c6d37b6b6c6382a3ccb2c5ff71358f3deac20cbd81
SHA512

16f27c946a5f4f3946f9c574ec0d004fea9e1f14b3731c899a1781c76950d9681b41178b0aaa2d1a9a9d3a44c0e2ccd6b04aeb207ae72ba6f08656b0a2af7a0d
SSDEEP

384:sL7li/2z8q2DcEQvdhcJKLTp/NK9xawU:qgM/Q9cwU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
baf2b0b6475fba741cae74c6d37b6b6c6382a3ccb2c5ff71358f3deac20cbd81

Files

baf2b0b6475fba741cae74c6d37b6b6c6382a3ccb2c5ff71358f3deac20cbd81
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ