21a9e1806230a9b9c365276cf1ed4543

General

Target

21a9e1806230a9b9c365276cf1ed4543
Size

33KB
MD5

21a9e1806230a9b9c365276cf1ed4543
SHA1

a0f309d9f9fe26a6e5ec9230dadfc02ec527759f
SHA256

74c14dd44567a946c71a64ae1561fe62d07ea02e5900f8467d31e9963bf18008
SHA512

2e9ea034c9e88418838d815db822c24e76537716707b70af18bbed14074afd2e88d0d3c09a88077ff113e502b06fdcd090850e369c283c321e2f550da212a21b
SSDEEP

768:a9iLAtDZQBz/q6+UpknnGLPu9ugJGFExq:MiLAtDZY/qBKSnGLPuNRxq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21a9e1806230a9b9c365276cf1ed4543

Files

21a9e1806230a9b9c365276cf1ed4543
.exe windows:5 windows x86 arch:x86

3da35bfac6c15bf142eb81fbead4abe8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
Sleep
GetTickCount
SetPriorityClass
GetCurrentProcess
lstrcmpiA
lstrcpynA
SetThreadPriority
GetCurrentThread
GetCurrentProcessId
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenA
GetModuleFileNameA
lstrcmpA
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
VirtualFree
UnmapViewOfFile
VirtualAlloc
MapViewOfFileEx
CreateFileMappingA
WriteFile
MapViewOfFile
SearchPathA
FreeLibrary
CreateProcessA
ExpandEnvironmentStringsA
GetShortPathNameA
GetTempPathA
GetLastError
DeleteFileA
GetFullPathNameA
lstrcatA
GetSystemDirectoryA
ExitProcess
CopyFileA
GetFileAttributesA
GetCommandLineA
GetVersionExA
lstrcpyA
WriteProcessMemory
OpenProcess
HeapAlloc
GetProcessHeap
HeapFree
LocalFree
GetComputerNameA
LocalAlloc
ReadFile
CloseHandle
CreateMutexA
WaitForSingleObject
OpenFileMappingA
ReleaseMutex

user32

DefWindowProcA
RegisterClassA
wsprintfA

advapi32

RegOpenKeyExA
RegDeleteValueA
GetUserNameA
RegConnectRegistryA
RegCloseKey

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.plugins
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3da35bfac6c15bf142eb81fbead4abe8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 1KB - Virtual size: 3KB

.plugins Size: 1024B - Virtual size: 1024B

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 1KB - Virtual size: 3KB

.plugins
Size: 1024B - Virtual size: 1024B