21aea7934aee995629e68e5834695608[.]bin | Triage

Sharing

General

Target

21aea7934aee995629e68e5834695608.bin
Size

268KB
MD5

996e086fda881f3db974c55da46d1b8a
SHA1

e77685a9c3b715d2b16d960a79c10e81bb2ea616
SHA256

57ccd7e81acdd5b28bf3307818952e146c3d32ed9d76efda5ca5f208c1be5f39
SHA512

61bf7583a5268555ec6ba8572a4c4b75aac9a5e5ec462084ce6f88b1ce2b99660e16d98cd5b38d1dbb0a247af67b14e4b16b175354305414af81bcc8462dfd9f
SSDEEP

6144:1W23DGtQef90n6jwm6e0k+STwEhdjOQFw7e/BmFMRzvBDY4nvznPGujcmk/c:1HSL90n6jiAwEh9OQW65m2zvBDZTPGuF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/1f6feae633a783cf6ef08eee6b65049fe5b692c8a743af8967984e2e212a06b5.exe

Files

21aea7934aee995629e68e5834695608.bin
.zip

Password: infected
1f6feae633a783cf6ef08eee6b65049fe5b692c8a743af8967984e2e212a06b5.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 271KB - Virtual size: 270KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ