213cdd92f8464c384e5174a188535949 | Triage

Sharing

General

Target

213cdd92f8464c384e5174a188535949
Size

1.7MB
MD5

213cdd92f8464c384e5174a188535949
SHA1

06b66da256d0825724cf691b07b04104eadc9e29
SHA256

e67eac33fa08d908c163e18f2cb8f00883c657cb4be5af65d1168eb55aa87615
SHA512

41addbac0fd056992d2f03c8d55f5da13da4d703bbf0f7c2c1d7f58cdbf71bd1577f3b017398f1eed45262886dadfd507fe83c8ed95e63a8f764d44031e7207e
SSDEEP

24576:1KAcmjCf6pezOf/A+uTZo9wcBwc/TgGjI3woirIXcT:/jCf64zx++ScpYIsT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
213cdd92f8464c384e5174a188535949

Files

213cdd92f8464c384e5174a188535949
.exe windows:4 windows x86 arch:x86

a13ee2bd542e30b8d805240c3433d2bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32.dll.

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32.dll.

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ