21a482969a9255f47ec9fe44c9293fc5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21a482969a9255f47ec9fe44c9293fc5
Size

7KB
MD5

21a482969a9255f47ec9fe44c9293fc5
SHA1

ae01cb309fff02aa7e1e88f8f5293280ada1fac1
SHA256

e984e4df5ab9575a7070481f1801471c1e7f91a41966f123f71991498f8e2cbf
SHA512

8746a3b7122bea53f91351d2b998edc91be9008992c6075051d3b496ee38b053860a3440599720201ea38f1438e29adea228bb6a9b9a6dd29df0239d3b6bc444
SSDEEP

192:Y14EVAtR5JmdAwbv/IO1Mi2/wxYoPr5mMs:Yl6tR5JmTxk/wxYoD5mM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21a482969a9255f47ec9fe44c9293fc5

Files

21a482969a9255f47ec9fe44c9293fc5
.exe windows:4 windows x86 arch:x86

b940cadb80c6ab17c0d6c9725b30af77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameW
UnmapViewOfFile
HeapFree
lstrcpynW
GetFullPathNameW
SetEnvironmentVariableW
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
WideCharToMultiByte
Sleep
MoveFileW
GetSystemTimeAsFileTime
DeleteFileW
lstrcpyW
lstrlenW
GetEnvironmentVariableW

user32

MessageBoxA

Sections

.text
Size: 7KB - Virtual size: 912KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE