INV #21855[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

INV #21855.exe
Size

608KB
MD5

9679de6d9acd068c7f902760f73fbd20
SHA1

1aef17bc39349726e31cdf77395b1b420c2417a4
SHA256

93b2e11e63c3e38bd7d2fc22514d2ae970e35ee23bd9fd829a75d25df3794dd8
SHA512

87ce2b5d5104f85dc28826de45111e56fe08113e49906a99ca97f8b67bb4119db347d03646d11ebdc6b5a5857c68fa0fb0fd3f5a7d3a78e9a4b4825295d22c25
SSDEEP

12288:92N8jiZ4zypIPvtPplTY6RhKuQAtb54gWMhSosI6LN4CHUTBiFRIIk1KxtTSPS:92N8jiZ4zypIPvJTDE6AgWMQ9LNC9iFs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
INV #21855.exe

Files

INV #21855.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 605KB - Virtual size: 604KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ