21911afd2eb4f6b50bc507b630b9c5d2 | Triage

Sharing

General

Target

21911afd2eb4f6b50bc507b630b9c5d2
Size

6KB
MD5

21911afd2eb4f6b50bc507b630b9c5d2
SHA1

c8b8c81e615fa84821c88c66f753534f14e90a58
SHA256

ac31a04a53c6d8488dbb15134f52bac97cde4aa13d6617639fe041d71e3867a2
SHA512

a7f9970380ba619e6df09a9eba7a617e0b6d05c51a395e29ffc5710656c7e9d74192ea2d2ad56285a60096a9be7a050e18c6b79c8a0f152bfc0616113ac0cdac
SSDEEP

96:9gVu9jCHzjvkYMTU6OybwEKX/TbD+pW8ZQEFaPtboyn6Ova:mV+CHz+syczepWbBP1oynB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21911afd2eb4f6b50bc507b630b9c5d2

Files

21911afd2eb4f6b50bc507b630b9c5d2
.exe windows:4 windows x86 arch:x86

ddf26b12ff9c5093b30a832bb24cf142

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
SetFileAttributesA
WinExec
DeleteFileA
GetLastError
MultiByteToWideChar
lstrlenA
InterlockedDecrement
GetStartupInfoA
GetModuleHandleA
LocalFree

ole32

CLSIDFromProgID
CLSIDFromString
OleRun
CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

SysFreeString
VariantClear
GetErrorInfo
SysAllocString

msvcrt

_controlfp
??1type_info@@UAE@XZ
_onexit
__dllonexit
__CxxFrameHandler
_EH_prolog
??3@YAXPAX@Z
??2@YAPAXI@Z
_CxxThrowException
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3

Sections

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE