21169db244f2679c4aa86345a5eaf767 | Triage

Sharing

General

Target

21169db244f2679c4aa86345a5eaf767
Size

17KB
MD5

21169db244f2679c4aa86345a5eaf767
SHA1

5175f64f561203054283de1906672defd1bed83b
SHA256

8e28b914229f3d23f0e2df17abe3074bd3a83d72d62ca62d0605bc92e9b934d8
SHA512

172f057a722de17b0557c47dae7c9ea606d887d64edabad1594e225bc40d7f8fc442383c2d3068693d112cfafac1bdb58310d4d3fe141b3c282dd3be06b5a1bc
SSDEEP

192:sJ/PMkjD44MP7nAxgwCMrpY7e8LqPZo5LdCfq1Rn6O3G:sJ/PMD4qAxgr6+e9Pfqbn1G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21169db244f2679c4aa86345a5eaf767

Files

21169db244f2679c4aa86345a5eaf767
.exe windows:1 windows x86 arch:x86

4005ccc09c9d9eeed7fa0774c1bf55ed

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

exit
gets
printf
raise
signal
strlen
system

kernel32

RtlUnwind

user32

OemToCharA

crtdll

_getch
__GetMainArgs

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE