b21a4482900a1a3446d7c2160b718de7ca30eaf1a94ef2213a1ec883aaad086a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b21a4482900a1a3446d7c2160b718de7ca30eaf1a94ef2213a1ec883aaad086a
Size

5KB
MD5

399a40e8676f209b3b2ceffec1302702
SHA1

0fb2ffbfa892095e3b974c81e808122bc3eb1e9a
SHA256

b21a4482900a1a3446d7c2160b718de7ca30eaf1a94ef2213a1ec883aaad086a
SHA512

63deec9aaf84aca3dc953ea23010536b04a301ac49d310d7e42db520c266a8d7403929b1e762c53c3a01d901bb0dead391373b8229c7ee86db4fca78d4b4f780
SSDEEP

48:6rKJtHoWXTmPqSFKG3jm8VEhxfJzuPDBrpkONW9cTrg7dYw31z1L9orwsHr:htH9XTeIG3MBwDVpkOQ9cTryT3Bnor

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b21a4482900a1a3446d7c2160b718de7ca30eaf1a94ef2213a1ec883aaad086a

Files

b21a4482900a1a3446d7c2160b718de7ca30eaf1a94ef2213a1ec883aaad086a
.exe windows:4 windows x64

08b0f3736d5e46595344d8feccf604d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsCpy
SnmpUtilOidAppend
SnmpUtilVarBindCpy
SnmpUtilOidFree
SnmpUtilPrintAsnAny
SnmpUtilMemFree
SnmpSvcGetUptime
SnmpUtilVarBindFree
SnmpUtilIdsToA
SnmpUtilOctetsNCmp

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ