12b97b10d3ea6376fee80bea78b67d40N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

12b97b10d3ea6376fee80bea78b67d40N.exe
Size

80KB
MD5

12b97b10d3ea6376fee80bea78b67d40
SHA1

7f7acfb3acdf9cf0b12df4825e8e96c108d9cd7d
SHA256

01f9c22793c4afc4590407aec361610ae57c63a5832a7cda79aa2dd6608944b1
SHA512

6122fe5b7aeb598c1cf0ba586daa7b225b764afb32298846f1702e76add032bafe9863bd480b693dd67eaccd932ae0d09806a7570dd07ea1166d08776a772ef0
SSDEEP

1536:vVVg0Rs4H3KfqCa4A3E4vDn1W3pNpifX5YZWv5RFeJuqnhCN:vVuF4EqCzOb1W39/GRFeJLCN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12b97b10d3ea6376fee80bea78b67d40N.exe

Files

12b97b10d3ea6376fee80bea78b67d40N.exe
.exe .ps1 windows:1 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ