21d18a182a289aa5c28c3ea3e340d887

General

Target

21d18a182a289aa5c28c3ea3e340d887
Size

28KB
MD5

21d18a182a289aa5c28c3ea3e340d887
SHA1

465ed3aa34670e39180e81cebfa02b0b6d8f9109
SHA256

75f8ce52fa843013049d9f57922deb58e68cfd0f9e546f5129fdecba2caa0c26
SHA512

025397240f3ab53900e04da034dc924b0e3955e29d9bb75a021cbb1d9b2bddc4ce7a348f95cd894ddb98b8daaf3183d2c8546302c30da5fb8b33f07c74261ba5
SSDEEP

768:9K++NdNh9LPRguS01h2fvdW1lacva8SQgdrGgd:9wdT9NguS01ANAlacFqrGq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21d18a182a289aa5c28c3ea3e340d887

Files

21d18a182a289aa5c28c3ea3e340d887
.exe windows:4 windows x86 arch:x86

a31b69324178052b70583ef733406a5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcessHeap
SetErrorMode
GetCommandLineA
CreateMutexA
GetLastError
GetTickCount
CreateThread
GetSystemDirectoryA
CreateProcessA
GetThreadContext
GetThreadSelectorEntry
ReadProcessMemory
VirtualProtect
WriteProcessMemory
ResumeThread
GetModuleHandleA
HeapFree
ExitProcess
HeapAlloc
WriteFile
CloseHandle
CreateFileA
lstrlenA
SetFileTime
SetFilePointer
CopyFileA
GetFileTime
Sleep
FreeLibrary
DeleteFileA
MoveFileExA
lstrcatA
GetWindowsDirectoryA
LoadLibraryA
GetProcAddress
GetVersion
FindFirstFileA
FindNextFileA
FindClose
GetModuleFileNameA
ReadFile
lstrcpyA
GetComputerNameA

wininet

InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA

shell32

ShellExecuteA

ws2_32

connect
setsockopt
recv
inet_ntoa
WSAStartup
ntohl
closesocket
htons
htonl
bind
socket
send

user32

wsprintfA

advapi32

ControlService
ChangeServiceConfigA
CloseServiceHandle
OpenSCManagerA
OpenServiceA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey

shlwapi

SHSetValueA

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 44B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a31b69324178052b70583ef733406a5f

Headers

File Characteristics

Imports

kernel32

wininet

shell32

ws2_32

user32

advapi32

shlwapi

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 44B - Virtual size: 2KB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 44B - Virtual size: 2KB