b21093ed0e9026d3be65a6e60eb99f380faceb267a3f9c56c86d926026c4c956 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b21093ed0e9026d3be65a6e60eb99f380faceb267a3f9c56c86d926026c4c956
Size

69KB
MD5

fab43d50fa7667bf52cdf67d1e422061
SHA1

3461f09564c1fa0e91b27932f01e326b03f021e3
SHA256

b21093ed0e9026d3be65a6e60eb99f380faceb267a3f9c56c86d926026c4c956
SHA512

3ed4c268c6bf8a7dc03b1b2270e48ccf129d2fb255ccaf3dcb4a476c4e261e698726b64de7230c44afd767959099bd8f86a5906d034923bb3af5893782a455d2
SSDEEP

1536:YC1MqmRzB+0ihT5RJ2EzkjZ0vBJ52zq9aGgUjfSql:/MvBrivRJ28CZEcGg8qs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b21093ed0e9026d3be65a6e60eb99f380faceb267a3f9c56c86d926026c4c956

Files

b21093ed0e9026d3be65a6e60eb99f380faceb267a3f9c56c86d926026c4c956
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 285KB - Virtual size: 285KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 328KB - Virtual size: 337KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 280KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ