21baaaaf7b60a7fa8b9c13f4e92e3500 | Triage

Sharing

General

Target

21baaaaf7b60a7fa8b9c13f4e92e3500
Size

64KB
MD5

21baaaaf7b60a7fa8b9c13f4e92e3500
SHA1

bcd39df63653751cd35bb59b7fee277f15e2916f
SHA256

84bb976501f76a7e17b8c3a29264881eecbc720df7d95dbad332bd92c766e63f
SHA512

0ccf8dc11e487f003bcd2eb12fa61d17f1c6c1dba3ce4da738bd2cbec8743dd28820cab0a0c0634ec31d96cfca4edd36bf2b1a34e8d31e4de73b5382183a685c
SSDEEP

768:ytrJ9Qhtn2JSOitrJ9Qhtn2RSOitrJ9Qhtn2aSOitrJ9Qhtn2RSO:ytri2YOitri2QOitri23Oitri2QO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21baaaaf7b60a7fa8b9c13f4e92e3500

Files

21baaaaf7b60a7fa8b9c13f4e92e3500
.exe windows:4 windows x86 arch:x86

802dcac7aab948c19738ba3df9f356d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strcmp
memmove
memcpy
strncpy
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
CloseHandle
InitializeCriticalSection
GetModuleFileNameA
HeapAlloc
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetTickCount
TlsGetValue
CopyFileA
WriteFile
HeapFree
CreateFileA
SetFilePointer
GetFileSize
ReadFile
EnterCriticalSection
HeapReAlloc
LeaveCriticalSection
TlsFree
GetLastError
SetLastError
WaitForMultipleObjects
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore

Sections

.code
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 5B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ