21942cf8d27034a57c2ca3060a85cf5dbdd87047f9e24021774ffc3f401b8c78 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21942cf8d27034a57c2ca3060a85cf5dbdd87047f9e24021774ffc3f401b8c78
Size

21.8MB
MD5

be282cc24d2007115b2536948239c31e
SHA1

2130946817dd9eedf76f353369a759a1c493e58f
SHA256

21942cf8d27034a57c2ca3060a85cf5dbdd87047f9e24021774ffc3f401b8c78
SHA512

891b54505149fa5a26e083fb87ac2194dc63c43226ca4b2d4bd6a4e3e383311b03e22fa52c3208b21ff8c90999474fec9b1e00ee0a76c21677205586b3f03cc0
SSDEEP

196608:PzDWtjZENQANNQoKWvN8mNNNNNNNNNNHdDP7aIJhLkNPFCZZwiJl1NLIsPA8fxvs:/mjwHTWP+Zw6NLIsFfskh1BmXGBfBd+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21942cf8d27034a57c2ca3060a85cf5dbdd87047f9e24021774ffc3f401b8c78

Files

21942cf8d27034a57c2ca3060a85cf5dbdd87047f9e24021774ffc3f401b8c78
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 21.8MB - Virtual size: 21.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ