21f2f325dafa4997664b56e983bd7546b152dae21bb6a566e67db031cdc9afd9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21f2f325dafa4997664b56e983bd7546b152dae21bb6a566e67db031cdc9afd9
Size

320KB
MD5

0a4747c6f8053b7999de3c051a4fbe50
SHA1

f4a1ec38cc6010d9440ecadfee7422f3784e4884
SHA256

21f2f325dafa4997664b56e983bd7546b152dae21bb6a566e67db031cdc9afd9
SHA512

ee690f8594fa4c3b4bb9b31640687a91805d0b3f4392464317f69d4b8285e305c71f94b0ed44552e6bdbf3b3ba0eea17776642f3e39077bff3647596ada82ac6
SSDEEP

6144:r5T1YRQ3H2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:r5TZ2EB0NxDIBuOFe7/uT

Score

N/A

Malware Config

Signatures

Files

21f2f325dafa4997664b56e983bd7546b152dae21bb6a566e67db031cdc9afd9
.exe windows x86

1ce656ec256e6308d4604c0d96fa3f45

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindActCtxSectionStringW
TransactNamedPipe
DeleteCriticalSection
lstrcpynW
RtlZeroMemory
SetUserGeoID
OutputDebugStringW
RegisterWaitForSingleObject
GetConsoleSelectionInfo
SetFileValidData

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE