1921[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1921.exe
Size

44KB
MD5

78b27fa0ff72ae0e560e45fb89f8224e
SHA1

7f1ff873814ad2d5ce3e20cf8660e32ef311ee26
SHA256

7c77414b548c3fe53b285019dc4c93464581d3b3ea9c2b151708c56f7bc9fec8
SHA512

178bcf57d544fc416403ed6836af5b441dfc227ad0ee6ad773751ca002a71cd71b37eb08a09840beda2b697f7d4132e0e8af4dbd69f6b03eeea4a959999d24db
SSDEEP

384:eEvDQc3NbRG1WrsD8ULdtOedVlN9qb6G3OdG5sVIA91h0yOjQ9b3Vd/bxlY8w6jC:VIbebcZOMhzlY85uWVo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1921.exe

Files

1921.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ