21b11333e069712ecc9ee63c08815371

Sharing

Copy URL

Twitter E-mail

General

Target

21b11333e069712ecc9ee63c08815371
Size

80KB
MD5

21b11333e069712ecc9ee63c08815371
SHA1

237e7a19e4a33f99fe71650fd3a0319e463dc1c6
SHA256

fc34386f573d4f8d769c70ec4fa22755c1bc51553a4a2f16ca5ff961ca9eec9b
SHA512

c2484a1a33a2a42d82a4e75028cf9fd90279dc2e0ecac0688c97b241846014ff77c504d3098f1c4dafbe6f15a2c6720289f5af1c2644bd06eff0e464a6beaade
SSDEEP

1536:BHBaogV82U+I21gB6AXWdBnRlqHiym9DiXjN:gV8aIASm3nxym9D+j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21b11333e069712ecc9ee63c08815371

Files

21b11333e069712ecc9ee63c08815371
.exe windows:4 windows x86 arch:x86

d779a390c88419443d7e7357327874df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindNextFileA
DeleteFileA
GetFileAttributesA
FindFirstFileA
SetFileAttributesA
GetDriveTypeA
CreateThread
FileTimeToSystemTime
FileTimeToLocalFileTime
GetSystemTime
GetModuleFileNameA
FindClose
GetLocaleInfoA
SetConsoleCtrlHandler
HeapSize
SetEndOfFile
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
VirtualProtect
Sleep
VirtualQuery
InterlockedExchange
GetLastError
MoveFileA
GetSystemTimeAsFileTime
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
RaiseException
GetProcAddress
LoadLibraryA
DebugBreak
HeapFree
CloseHandle
WriteFile
ReadFile
ExitProcess
TerminateProcess
GetCurrentProcess
FlushFileBuffers
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
GetProcessHeap
FreeLibrary
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetStdHandle
SetFilePointer
CreateFileA
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
GetSystemInfo

user32

GetDesktopWindow
SetWindowRgn
GetWindowRect
GetCursorPos
SetWindowPos
PostMessageA
CreateDialogParamA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
FindWindowA

gdi32

CreateEllipticRgn

shell32

ShellExecuteA

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d779a390c88419443d7e7357327874df

Headers

File Characteristics

Imports

kernel32

user32

gdi32

shell32

Sections

.text Size: 48KB - Virtual size: 45KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 8KB - Virtual size: 4KB

.text
Size: 48KB - Virtual size: 45KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 8KB - Virtual size: 4KB