0021d18795250bc35ab5279bf78307e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0021d18795250bc35ab5279bf78307e4
Size

83KB
MD5

0021d18795250bc35ab5279bf78307e4
SHA1

1dc197f4a7796534f579b3c72e039456c3eac23f
SHA256

ada08e9c318f03de76109b8d4aa05c75fc901f836e2d5f00dade6269e4d9feb5
SHA512

cb5cb4714c04e2df3ccd92966d76136b77c7c54e0e5cd13b65855471c5e6450e6949e6b5e32f835142c1c00598a23d672a698e6619be8ff082293d1de721a645
SSDEEP

1536:h8/mVpxGJWZ3Iah6G5JugBPMDAjw46G2XZtaE3EpjVrs2ryrd1vUQuqwcizSkX:K/mnwJWKsXJuQOOd2ptTEHs2quciu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0021d18795250bc35ab5279bf78307e4

Files

0021d18795250bc35ab5279bf78307e4
.exe windows:4 windows x86 arch:x86

2409ee13e56928b7d8444dc00bfd0768

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessInternalA
CreateTimerQueue
SetConsoleCP
GetFileAttributesExW
ScrollConsoleScreenBufferA
GlobalFree
_hread
LoadLibraryExA
EnumTimeFormatsA
GetFileTime
IsBadHugeReadPtr
ReadConsoleOutputCharacterW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE