21957b0c6acf67944e86ee090df195d1a1cc27753946a6d15cdcde201573b63e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21957b0c6acf67944e86ee090df195d1a1cc27753946a6d15cdcde201573b63e
Size

643KB
MD5

16b7a722f572f38f6793932417de40d3
SHA1

74584115d3514172a14005901b4dbe7efaebad90
SHA256

21957b0c6acf67944e86ee090df195d1a1cc27753946a6d15cdcde201573b63e
SHA512

d76ba1fe88450289fb9d8e0cefc8fc38344a9202c9f340e465d28644a51628b289ed4172ca43084b97e0de7b867638ef3f815ce281fdc3321ca3ebde6a20215a
SSDEEP

12288:uxs2iNPyCK2xrOoIyQ/WxU0LsShN+9/vetfjO0oDzEbN031OeN/+9EjnatCUHthY:/15yC5Ideu0Lm1WRa0oDIc1Oa++jatBQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21957b0c6acf67944e86ee090df195d1a1cc27753946a6d15cdcde201573b63e

Files

21957b0c6acf67944e86ee090df195d1a1cc27753946a6d15cdcde201573b63e
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

tkvU.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 640KB - Virtual size: 640KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ