21bcb4b12052f3c175b02baeff3cd539 | Triage

Sharing

General

Target

21bcb4b12052f3c175b02baeff3cd539
Size

209KB
MD5

21bcb4b12052f3c175b02baeff3cd539
SHA1

cdc9d8047a529cbcf504a33083b48d573d751743
SHA256

267d8cc1689679116d31f13d3fa9b5bd48b6aa327846c89e56c592fe2da1a3f1
SHA512

616eed0d9d3a21f8bc1f8f0a2c7770d848e59dcb67f0d4ac4a8181c6a0bff96c053947655a5181f5c6ac3800d90272e7f8d8916012bb390bc3ebf67a8e10532b
SSDEEP

6144:UlsSFhzhXVW4u4Xzbn4SRMhIr5OR+2la3ca3VxNmrBHhFozg:jUhdFVuezbnWI5OR+HhFurBBFkg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21bcb4b12052f3c175b02baeff3cd539

Files

21bcb4b12052f3c175b02baeff3cd539
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 204KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE