21a7fa7a387628bf5c98520698337f71

General

Target

21a7fa7a387628bf5c98520698337f71
Size

64KB
MD5

21a7fa7a387628bf5c98520698337f71
SHA1

d7d850f2605c6c070b644cffeb751b3d21c9d0c9
SHA256

46ded49f4d79de26e077eaedd6b44838d919b8a56f2ce33391683a5a21ec5098
SHA512

2ae91e76f48dfc8e8cdfc2123ab3e0b2bb76d3cc7aa73e42fecce776e32479efcaed79e76b7a4f32901b0285e152e38761ecea8beaa5b9122a3d9fe275229fb3
SSDEEP

1536:v6p2F8MHsNxVRQleqvNZe2PBhDyrkOtu1fbhHB0BWK:C8F8MexVRQln5hDyrk0u1fbr0BWK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21a7fa7a387628bf5c98520698337f71

Files

21a7fa7a387628bf5c98520698337f71
.exe windows:4 windows x86 arch:x86

56ad30eef5d7bfbe77e3078d61de4fb5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetThreadPriority
SetFilePointer
GetCurrentProcessId
SetEvent
FileTimeToSystemTime
GetUserDefaultLangID
GetVersion
QueryDosDeviceW
LoadLibraryW
CancelWaitableTimer
lstrlenW
CreateFileW
MoveFileW
SetEndOfFile
WideCharToMultiByte
Sleep
LockResource
GlobalUnlock
GlobalLock
CloseHandle
GetLocalTime
TerminateThread
GetCurrentThread
CreateWaitableTimerW
GetLastError
LoadResource
FindFirstChangeNotificationW
ReadFile
VirtualFree
GetProcAddress
LoadLibraryA
GlobalFree

user32

RegisterWindowMessageW
SetCursorPos
UpdateWindow
TranslateMessage
EnableWindow
CreatePopupMenu
wsprintfW
ReleaseDC
SetForegroundWindow
PostThreadMessageW
SetCapture
SetLayeredWindowAttributes
LoadStringW
RedrawWindow
LoadIconW
GetSysColor
GetKeyState
SendMessageW
DestroyIcon
SetWindowTextW
MessageBoxW
InvalidateRect
SystemParametersInfoW
SetCursor
ReleaseCapture
GetClassNameW

gdi32

GetDeviceCaps
SetBkMode
GetStockObject
StretchBlt
MoveToEx
LineTo
GetMapMode
CreateFontIndirectW
Rectangle
SetTextColor
GetObjectW

advapi32

RegSetValueExW
RegQueryValueExW
LookupAccountSidW
LookupPrivilegeValueW
StartServiceW
SetSecurityDescriptorDacl
GetUserNameW

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

56ad30eef5d7bfbe77e3078d61de4fb5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 52KB - Virtual size: 49KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 1KB

.text
Size: 52KB - Virtual size: 49KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 1KB