e45dfee5a8ddf137ebac4a50852869fde0b42bc4e63aa86966b1058bfdf2673a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e45dfee5a8ddf137ebac4a50852869fde0b42bc4e63aa86966b1058bfdf2673a
Size

12KB
MD5

aaa0446d255ea51880a7022afbb42dd3
SHA1

f7503f1f2dc7469aed637b272dd5e827ba5cd037
SHA256

e45dfee5a8ddf137ebac4a50852869fde0b42bc4e63aa86966b1058bfdf2673a
SHA512

036d40e83eaaf45a80ed35aa84058339dd8b6d949ed6c5eff2c07ad7a453792451fe3b01c88aee63cfbc68b7c4e0add26e387ef1dc5eeb9bbfba3ea5aa57ae8b
SSDEEP

384:oL7li/2zHq2DcEBvdhcJKLTp/NK9xa20:WbD/Q9c20

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e45dfee5a8ddf137ebac4a50852869fde0b42bc4e63aa86966b1058bfdf2673a

Files

e45dfee5a8ddf137ebac4a50852869fde0b42bc4e63aa86966b1058bfdf2673a
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ