21588b3924e2b29bb304b94c2ecd02a4 | Triage

Sharing

General

Target

21588b3924e2b29bb304b94c2ecd02a4
Size

56KB
MD5

21588b3924e2b29bb304b94c2ecd02a4
SHA1

a49f0df16e103e55a0b95c2c07d3fdad2469c753
SHA256

c2871e6039277ae3d6ed024ac047c091f021b2144755cb612c40a0afb8b91a76
SHA512

74f8ed8d0ec65b7d324cc27dee950cfa97048977bbcab7f8cdccfe6019f781a78940576679638894c2b5cd4280c43d0d7376aeff1e3e0bcc4165258d141bd26e
SSDEEP

768:xz4hDrB0PDzDUYFOH6cMpsW2RbwaTeoJv+C2bakfeehTlnkJyYwd/e:d4hvWPQeOaGHRlZJkekfeiTlnlYwd2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21588b3924e2b29bb304b94c2ecd02a4

Files

21588b3924e2b29bb304b94c2ecd02a4
.exe windows:4 windows x86 arch:x86

29d4d9a4e535bff721362e89820bef9e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

shell32

SHGetSpecialFolderPathA

Sections

.text
Size: 45KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE