98738e70053eee64775e8e2dd593bb9536edc62d3804f785c5b8c6834ccda6a7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98738e70053eee64775e8e2dd593bb9536edc62d3804f785c5b8c6834ccda6a7
Size

93KB
MD5

5b158d4a2d152fdbf42a2ef389cfef51
SHA1

0c4851e806cb6e84ee703f640229005c616cfbdd
SHA256

98738e70053eee64775e8e2dd593bb9536edc62d3804f785c5b8c6834ccda6a7
SHA512

38c709d4ed959de1aae0a939139169efef65c727143c54d22dff1e63fb5eaec4d1a0d9fc568773c549f95b2a488c037ab80cb3d99c8762ee737f8ec780e548c9
SSDEEP

1536:GQ1Tzy48untU8fOMEW3jyYfPiuO8V2CoiK2AaM:GazltU8OsaSLov2AL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98738e70053eee64775e8e2dd593bb9536edc62d3804f785c5b8c6834ccda6a7

Files

98738e70053eee64775e8e2dd593bb9536edc62d3804f785c5b8c6834ccda6a7
.exe .vbs windows:4 windows x86 arch:x86 polyglot

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.code
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE