21c51631286e8945cccdc5f46fd6934f | Triage

Sharing

General

Target

21c51631286e8945cccdc5f46fd6934f
Size

43KB
MD5

21c51631286e8945cccdc5f46fd6934f
SHA1

e3c9b698d7b9403a0f895dc624def7a346bcf67c
SHA256

d3e85f9bbc0f77b36de25debe9ea4395119c50e57954cd801ef5429863388656
SHA512

f8d0495a0305a2b70c358ab0ff6693e8c613cb2cc6ecad03bfb0b4596795af721fe3f8c9eae6bd54aa0d96c09f014f32585dcbce354a6f82b3f7726caac1325c
SSDEEP

768:iSmvmoTIBlsnLHyCxMmkpigTbDNMHm5+nr7aZScPees97qU6MWH:iSmvmwznLHpBkYufNV5+n67e7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21c51631286e8945cccdc5f46fd6934f

Files

21c51631286e8945cccdc5f46fd6934f
.exe windows:4 windows x86 arch:x86

5a9460aaf05c1c5daafc9ea4681306e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
lstrcmpA
lstrlenA
FindAtomA
lstrcpynA
GetModuleFileNameA
CreateMutexA
CloseHandle
GetTickCount
GetVersion
GetTempPathA
GetSystemTime
WriteFile
lstrcpyA
GetCommandLineA
CreateProcessA
lstrcatA
GetLastError
GetProcAddress
GetTempFileNameA
GetLocalTime
LoadLibraryA
ExitProcess
OpenMutexA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
VirtualQuery
GetVersionExA
RtlUnwind
IsDebuggerPresent

user32

wsprintfA
ClientToScreen
GetCursorPos
GetCaretPos
GetWindowRect
EqualRect
IsWindowVisible
GetFocus
InflateRect

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE