221421166d156c4fae07a3e6e4682418 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

221421166d156c4fae07a3e6e4682418
Size

185KB
MD5

221421166d156c4fae07a3e6e4682418
SHA1

c490f217ffd695974e45b4d82c1c462b8f8e1464
SHA256

660a2121eacc88fabbeac73cdda045e3e7d509bd57589c67f49de67d92f8cc13
SHA512

67af7714fd6cdd55fa81cc00961de3daea38630f87eb291c07ed6d4165c29c2ff15242b58f685fd30260c103cbbc014fcb24144fc3698123e7ea78185ee1be3b
SSDEEP

3072:6UpSbr6BdOQCDfB7NyLVjHHnK607nGzsH8rRmcR71m9pOnguZK:6UAfugruxDK97GzscrZJwpz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
221421166d156c4fae07a3e6e4682418

Files

221421166d156c4fae07a3e6e4682418
.exe windows:4 windows x86 arch:x86

a439f80122771f7ffbf0e019fc981508

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__fmode
__set_app_type
_except_handler3
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_controlfp
_exit

kernel32

GetModuleHandleA
OpenSemaphoreA
SetNamedPipeHandleState
Heap32ListFirst
GetThreadPriority
PeekNamedPipe
SetConsoleCtrlHandler
GetStartupInfoA

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ