213c307b805a8bdbae7571c4b49061a5 | Triage

Sharing

General

Target

213c307b805a8bdbae7571c4b49061a5
Size

33KB
MD5

213c307b805a8bdbae7571c4b49061a5
SHA1

eb5bcfff22e15ed8d57939cfe62190dba461dcc8
SHA256

584504ac9149c0bc85e11df6be4ed032b9d900fe556eb4d436efe32e17ced417
SHA512

fe1f52fa6161bc55d94d478bbc1d9ce1fe9d511e562d252b85065aaa92cc9d989829243193fbd260cf00ad22b4f21f5c66fc6293159a54e35887caddfa1ec6fd
SSDEEP

768:5lcf0C9gPfGLhKRlSGfnfSRxju4K/r8CiWnzObu4CB:XaPgmtcfs3K/IC/zq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
213c307b805a8bdbae7571c4b49061a5

Files

213c307b805a8bdbae7571c4b49061a5
.exe windows:4 windows x86 arch:x86

37864467a36d50fb91fb94ca0b7c38c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetConsoleWindow
GetDateFormatW

msvcrt

_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf

shell32

SHLoadOLE
StrStrIA
DuplicateIcon

Sections

.text
Size: 20KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE