121d997ddaef13823a0e5321a9cb7f3b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

121d997ddaef13823a0e5321a9cb7f3b
Size

68KB
MD5

121d997ddaef13823a0e5321a9cb7f3b
SHA1

4212ed5f88ee776eb4b8c583f4a04bf0ae9681ec
SHA256

a5cbdc3b8ecb831abee995cd3b61f530f3075e82fd4db1329b729b7d0539d329
SHA512

51431b31cc3e6089314c4921124c34d19a4ef8b740d71d9040dde72742e9f0462d1f7adf3e94c82f906e8cbf2215cc94ca3180418b61925dc8c3096f2793c290
SSDEEP

768:oTDDO3N3Gupxryb8tBcrCUvo4s6YXdjvMxkRu3BdX39pGPEbk+YhO:oTmtGQxru8cjgMx8eBdX3nGPqk+yO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
121d997ddaef13823a0e5321a9cb7f3b

Files

121d997ddaef13823a0e5321a9cb7f3b
.exe windows:4 windows x86 arch:x86

d19c35bfc4cce490671743f1ba2eb7b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
GetLastError
GetProcAddress
LoadLibraryA
GetStartupInfoA
GetModuleHandleA

advapi32

RegEnumValueA

msvcrt

_controlfp
??3@YAXPAX@Z
sprintf
__CxxFrameHandler
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ