21a428e4996879139c932e8093e05618

General

Target

21a428e4996879139c932e8093e05618
Size

28KB
MD5

21a428e4996879139c932e8093e05618
SHA1

e10e835f6955af9d956e2fd40d4e4567ba944c0d
SHA256

73f783d039fa5c6dda03c1402ea61a24fcd38aea0f57fc5dbd4fc41958491780
SHA512

b5f4f0f0fbfb929022975a0110c3df183c08421a8e34f866babfcc42e69847804a1ddf45ed796d8815d95e69c477ebc50a1863d057d93e79120c7d4f4540645f
SSDEEP

384:lihsEv3B3zbFCdIQrGYD5WSnMzd5fjFY97KJ7kchn4G4:lEsQsdIj05WSMzd5r+xAz4G4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21a428e4996879139c932e8093e05618

Files

21a428e4996879139c932e8093e05618
.exe windows:4 windows x86 arch:x86

6e0d73f464ddba9fa9cccae61ff19d56

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
GlobalFree
GetStdHandle
WriteFile
DeleteFileW
CopyFileW
GetFileTime
GetLastError
GetCPInfo
CreateThread
CreateDirectoryA
FindFirstFileA
CreateProcessA
OpenFileMappingA
OpenFile
CopyFileExA
DeleteFileA
GetFileSize
ReadConsoleA

comctl32

ImageList_Replace
ImageList_GetImageInfo
ImageList_Destroy
ImageList_Read
ImageList_Copy
ImageList_DragShowNolock
ImageList_Remove
ImageList_Merge
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_GetImageRect
ImageList_AddIcon
ImageList_DragEnter
ImageList_LoadImageW
ImageList_Draw
ImageList_AddMasked
ImageList_DragLeave

gdi32

AddFontResourceW
DeleteObject
AddFontResourceExA
SetTextColor
BitBlt
ExtTextOutA
AddFontResourceTracking
ClearBrushAttributes
AddFontResourceA
GetBitmapBits
CreateSolidBrush
CancelDC
GetClipBox
AddFontResourceExW
GetPixel
AddFontMemResourceEx
DeleteDC
GetBrushOrgEx
CopyMetaFileA
GetCurrentPositionEx
ClearBitmapAttributes

advapi32

RegDeleteValueA
RegReplaceKeyA
RegReplaceKeyW
RegDeleteKeyW
RegCreateKeyW
RegCreateKeyExA
RegEnumKeyExA
RegEnumKeyW
RegQueryValueExA
RegQueryValueExW
RegQueryValueA
RegQueryValueW
RegDeleteValueW
RegGetKeySecurity
RegDeleteKeyA
RegOpenKeyA
RegEnumValueW
RegCreateKeyExW
RegQueryInfoKeyA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e0d73f464ddba9fa9cccae61ff19d56

Headers

File Characteristics

Imports

kernel32

comctl32

gdi32

advapi32

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 20KB - Virtual size: 5.1MB

.rsrc Size: 1024B - Virtual size: 780B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 20KB - Virtual size: 5.1MB

.rsrc
Size: 1024B - Virtual size: 780B