204d12339aee656dd74ae793af50b97780da2297716a222ca9d5e5716b1e729c | Triage

Sharing

General

Target

204d12339aee656dd74ae793af50b97780da2297716a222ca9d5e5716b1e729c
Size

127KB
MD5

572c427f4a6204d0c1d16840e3ea6807
SHA1

db81d828a801af0ea640aa186df1a17fb9fe75d7
SHA256

204d12339aee656dd74ae793af50b97780da2297716a222ca9d5e5716b1e729c
SHA512

b9e27e057914e8b5fa2deb370d3e0ea32b51dc306a4e4fcc9cd903841674835d748755a7872129cdcb399f95cfcd5f4848ef7c97b70bba8e1c40cf8e5700f0e8
SSDEEP

3072:Z63Q77Nv63Q77NWTSjPXw23TGB4VasGu3T4ya:IQ7JeQ7Jugvw2Q6asGb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
204d12339aee656dd74ae793af50b97780da2297716a222ca9d5e5716b1e729c

Files

204d12339aee656dd74ae793af50b97780da2297716a222ca9d5e5716b1e729c
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ