21edbf4ed308c0011f0abe4fc3fd971a | Triage

Sharing

General

Target

21edbf4ed308c0011f0abe4fc3fd971a
Size

5KB
MD5

21edbf4ed308c0011f0abe4fc3fd971a
SHA1

369800de4d67a09ed798bd1b4f8c31de34d37450
SHA256

9199b70a5e86348898e78d090f79a6566037393412247c1de88743affc8d00d2
SHA512

04ebd6beab4a5515605f2a772ce04258ac664ee98fb57aacdb1789f1633c5f45a4d2f839d8aea3ebb3fb4132b66b53d7d7c8cc08204d192f976c5922f43ed62d
SSDEEP

96:Z1Zi5dUxxGYcxwC+KB7XkKIkK58KEMM6:85dUxUFZzIDz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21edbf4ed308c0011f0abe4fc3fd971a

Files

21edbf4ed308c0011f0abe4fc3fd971a
.dll windows:1 windows x86 arch:x86

b62660cd15f66fa5d7b8ee4d3ea7279c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteProcessMemory
GetModuleHandleA
CreateThread
Sleep
lstrlenW
ReadProcessMemory
lstrlenA
GetProcAddress

user32

CallNextHookEx
SetWindowsHookExA

Exports

Exports

A

Sections

.ata
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ