21fed19368d44e0106f07f1aa60398d3[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21fed19368d44e0106f07f1aa60398d3.bin
Size

464KB
MD5

028c6752e7569b13659354631afee84f
SHA1

a6aa01bfc68cf47025f01796c94d901a633aba5d
SHA256

44122a316a3793a210caabca8e8c637b2a71c45082db1a1b953e95592e66d992
SHA512

fa663b2378045b944a1443ed6e31461abfaa904f90b3b0fd62f5a94e3556f97deae76d66871bf9651dadc2bb9e7925dd8a2e2ad2846ec14cf4b64a01f6ff9cee
SSDEEP

12288:SS9Eyu2U94KrN1B/youjNf9gGOWAyBRd5ZWs:1u2DeqdT3Bz5Zh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/4a81684c5c627515fa3dfeafb6d7feb73db552e3442403176a80edc9a670bcba.exe

Files

21fed19368d44e0106f07f1aa60398d3.bin
.zip

Password: infected
4a81684c5c627515fa3dfeafb6d7feb73db552e3442403176a80edc9a670bcba.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 532KB - Virtual size: 531KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ