21a11b1a48942c56cf000160ad0a71574d50b4196605a041683e023e2be9701e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21a11b1a48942c56cf000160ad0a71574d50b4196605a041683e023e2be9701e
Size

1.7MB
MD5

ab044255b74055ba44e5848ba8e0feb4
SHA1

15b3121670d6a769ebe7292879b274e99d091cc1
SHA256

21a11b1a48942c56cf000160ad0a71574d50b4196605a041683e023e2be9701e
SHA512

063326941fe716487dc40ca48476b19a605eb4216881174bfd5dc902fcdf4889ec041ecde848b48d3204138d377dd3c8b38e92eb83c074e7546a33d7f0fa86f2
SSDEEP

24576:i9BaXVav9Mk7A5nx/WnSyhbzvZOqU1r4/izRXTOkMtrIceMaFPjkjD29S:s7v9MquWSytLoqUhakOElMaFLk7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21a11b1a48942c56cf000160ad0a71574d50b4196605a041683e023e2be9701e

Files

21a11b1a48942c56cf000160ad0a71574d50b4196605a041683e023e2be9701e
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ehExtHost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ