c1686e5f354a9445bf6ea2aed8ae2a1edf70797f6ba329d7d7fe1100bac0e9c2 | Triage

Sharing

General

Target

c1686e5f354a9445bf6ea2aed8ae2a1edf70797f6ba329d7d7fe1100bac0e9c2
Size

12KB
MD5

370487c059ca4121883182b9013fdbe4
SHA1

3041faacb8cd97e60bd753f5e604070759881817
SHA256

c1686e5f354a9445bf6ea2aed8ae2a1edf70797f6ba329d7d7fe1100bac0e9c2
SHA512

9b42847be7f44b84514a9af9210df60ffac350423507637441eae1ffa60a156942803fd8e67a43a16d3556c940a29c061cba5bcfa9150065ff87a560200d6d1c
SSDEEP

384:oL7li/2zyq2DcEQvdfcJKLTp/NK9xaZn:WSMZQ9cZn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1686e5f354a9445bf6ea2aed8ae2a1edf70797f6ba329d7d7fe1100bac0e9c2

Files

c1686e5f354a9445bf6ea2aed8ae2a1edf70797f6ba329d7d7fe1100bac0e9c2
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ