5a34b0996355c783470880ff212f7a40N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a34b0996355c783470880ff212f7a40N
Size

96KB
MD5

5a34b0996355c783470880ff212f7a40
SHA1

548ba93d4fadbf78aebddbe5650eb994aaf8ae44
SHA256

f512f87f6cfb7f7460f55b8d59d246e6f43e22e7c0ce7a7ab0e07d1a007d7e70
SHA512

1f2c04ce1da16f754b262bf55fe0c786f021b1b08eafd21512ac0525682ee18a0e0f6c7b1633e3ba5e5f589145e1bad269898a9937324e22726e5a80fee8cd90
SSDEEP

3072:lbjgjXxdWBhMwRFy2Rk/kcIAebPph/ATvYKyUDI7LurS:lfAXxd0qf2L/ATvryOI7aS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a34b0996355c783470880ff212f7a40N

Files

5a34b0996355c783470880ff212f7a40N
.exe .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

7k(k4X/L
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

63"YSDFM
Size: 512B - Virtual size: 204B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rfGsEA1#
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

w&h%1B"2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

@Mv$ew/1
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wa?k4g2a
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

x1Dx"W40
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

@xe3>(Gv
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ