2f98e513b1588aa5f3e87c9e44d3f3d0ccbb548cf46f58982fd58ebe0f62d906 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f98e513b1588aa5f3e87c9e44d3f3d0ccbb548cf46f58982fd58ebe0f62d906
Size

12KB
MD5

a643d13ed73cbc53e79ab1a6ea1a0646
SHA1

91406c56c7160edf24a66f67c9a081ce51cdfe8a
SHA256

2f98e513b1588aa5f3e87c9e44d3f3d0ccbb548cf46f58982fd58ebe0f62d906
SHA512

ea49d6eb51d0977051e974f32b5d51d4244d567f10227952140b0642f1c6b0bd8c82c87f50b55e1281de7ba2e1da0c5e0e66417bba7fd84706a12df195b45076
SSDEEP

384:JL7li/2z2q2DcEQvdhcJKLTp/NK9xayo:5uM/Q9cyo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f98e513b1588aa5f3e87c9e44d3f3d0ccbb548cf46f58982fd58ebe0f62d906

Files

2f98e513b1588aa5f3e87c9e44d3f3d0ccbb548cf46f58982fd58ebe0f62d906
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ