110c74bba6e20bf7c0be5aa716fe5daa638bb08f60e0e446d3934f164132c41dN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

110c74bba6e20bf7c0be5aa716fe5daa638bb08f60e0e446d3934f164132c41dN
Size

51KB
MD5

7b2ba3eb8d2b7ea2b046d389f56b00a0
SHA1

d9919fdb4f51867d44e4b46b68741c8dbe7e904f
SHA256

110c74bba6e20bf7c0be5aa716fe5daa638bb08f60e0e446d3934f164132c41d
SHA512

a8f8f0c449d9340ab2c0527bfc66a94471892d0affc6f2e99f0f1d7d087e4235351769cd864a68655995f15a3d2c05a8d3a1d41377c3f3bbc8f79ec1c09a9211
SSDEEP

768:kiAzX25pbPRRMq+UkCRaUUI4fDDf9iLKgts2Cc9pDuFhnE2PD0m8Ji0/2:kiAzX25tPRmZCaNDDlUtsapKLhmJJ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
110c74bba6e20bf7c0be5aa716fe5daa638bb08f60e0e446d3934f164132c41dN

Files

110c74bba6e20bf7c0be5aa716fe5daa638bb08f60e0e446d3934f164132c41dN
.exe .wsf windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ