21b896e7384863c875c84e0530555bdd068b49eff96df10893372e9f5334fff8 | Triage

Sharing

General

Target

21b896e7384863c875c84e0530555bdd068b49eff96df10893372e9f5334fff8
Size

1.1MB
MD5

b2700db2fa8df979ca91648135b2f72c
SHA1

41fc953e0a440faf5af09494b4f97d7a6d756538
SHA256

21b896e7384863c875c84e0530555bdd068b49eff96df10893372e9f5334fff8
SHA512

42282b65ea8f5734b6235e314060f135440743c5ba7b0c2ba4634c4b7a1b26b5950de026a06778937b5113ea6561cb7d1ede45fc3a849eadc223275dd972af19
SSDEEP

24576:su1LL+a4d2o6w3n6swBigTShYsCY2k+CoZxO:V1LLgD36syigTS5f+CIx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21b896e7384863c875c84e0530555bdd068b49eff96df10893372e9f5334fff8

Files

21b896e7384863c875c84e0530555bdd068b49eff96df10893372e9f5334fff8
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ