21bc79a4bd67d95e77935e39c29d61d7

General

Target

21bc79a4bd67d95e77935e39c29d61d7
Size

394KB
MD5

21bc79a4bd67d95e77935e39c29d61d7
SHA1

88f1225f6eb7356bca5da87a54b4b819de092e4d
SHA256

12822f41224c869b1207ca700740f38d597cf07e245bad0c3b2ed6043628b874
SHA512

feb7c7052293428017abbeaa764751774f2b18ff7dae41f722e4e90a2a2dead0d20471cb471c5a2ee334e20e784e2882e6980f6a0677ca2b5e625d91439ec277
SSDEEP

6144:CKt5hq1x4tfRvlzBF4Cr5eBFb5EfIkgiv5/EWRrTKGODuG1:CKt5h0x4JRtNFN5EnwIAvZ1Tw9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21bc79a4bd67d95e77935e39c29d61d7

Files

21bc79a4bd67d95e77935e39c29d61d7
.exe windows:4 windows x86 arch:x86

ddef605a6a268c6737447f747b62c20f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
LocalAlloc
GetModuleHandleA
Sleep
LoadResource
GetSystemTime
VirtualAlloc
FindResourceA
GetVersion
SuspendThread
CreateThread
FreeResource
SizeofResource
LockResource
FindResourceExA
VirtualProtect
SetLastError
CloseHandle
LocalLock
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
HeapAlloc
GetOEMCP
VirtualFree
LocalFree
GetLastError
GetACP
GetCPInfo
GetProcAddress
VirtualQuery
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
RtlUnwind
WriteFile
GetStringTypeW

user32

MessageBoxA
IsWindowVisible
FindWindowA
EnableWindow
GetDC
LoadIconA
GetDesktopWindow

gdi32

GetObjectA
DeleteObject

ole32

CoUninitialize

avifil32

AVIBuildFilterA

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 324KB - Virtual size: 325KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 417KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ddef605a6a268c6737447f747b62c20f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

avifil32

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 28KB - Virtual size: 25KB

.data Size: 324KB - Virtual size: 325KB

.tls Size: 4KB - Virtual size: 2KB

.rsrc Size: 6KB - Virtual size: 417KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 28KB - Virtual size: 25KB

.data
Size: 324KB - Virtual size: 325KB

.tls
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 6KB - Virtual size: 417KB