21cdbf93a530447e6940980b0d04050f

Sharing

Copy URL Twitter E-mail

General

Target

21cdbf93a530447e6940980b0d04050f
Size

64KB
MD5

21cdbf93a530447e6940980b0d04050f
SHA1

d9a7f93d767ba82cc92f2f4baa25b4d2f6392063
SHA256

d2845188c6b4c42128ba49337beb080ae4085c4a797345034ae7de8e3930bd05
SHA512

bb868cbad885da3e17eec99c3214fa2d5da5f4bcc00ba9c94c51ede9451039bd2608a81d72d79163885ce6568fbe5f83c389293e733393cc5724c135f18b8f93
SSDEEP

1536:90yxBE6JukNS8nfH6QlrvpWJnWWw683Ix:97PJukLf6QlTpWtn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21cdbf93a530447e6940980b0d04050f

Files

21cdbf93a530447e6940980b0d04050f
.exe windows:4 windows x86 arch:x86

a2c225eb764f339179823adb9e9b01cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

advapi32

RegOpenKeyA
RegGetKeySecurity
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueA
RegEnumKeyA
RegQueryInfoKeyA
RegQueryValueW
RegDeleteValueA
RegOpenKeyExA
RegEnumValueW
RegCreateKeyW
RegLoadKeyA
RegReplaceKeyA
RegEnumKeyW
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExW
RegQueryInfoKeyA
RegQueryValueExA
RegQueryInfoKeyW
RegQueryValueExW
RegLoadKeyW
RegLoadKeyA
RegDeleteValueW
RegEnumKeyExA
RegCreateKeyW
RegQueryValueW
RegEnumValueA
RegEnumKeyA
RegGetKeySecurity
RegCreateKeyExW
RegReplaceKeyW
RegDeleteKeyA

comctl32

ImageList_EndDrag
ImageList_GetDragImage
ImageList_Destroy
ImageList_LoadImage
ImageList_DragLeave
ImageList_Merge
ImageList_GetImageCount
ImageList_LoadImageA
ImageList_DragEnter
ImageList_ReplaceIcon
ImageList_LoadImageW
ImageList_AddMasked
ImageList_AddIcon
ImageList_Copy
ImageList_DrawIndirect
ImageList_DragShowNolock
ImageList_Draw
ImageList_GetImageInfo
InitCommonControls
ImageList_GetDragImage
ImageList_LoadImageA
ImageList_DrawIndirect
ImageList_Draw
ImageList_Replace
ImageList_AddIcon
ImageList_GetImageRect
ImageList_DragShowNolock
ImageList_EndDrag
ImageList_GetImageCount
ImageList_Merge
ImageList_DragMove
ImageList_DragEnter
ImageList_Read
ImageList_GetIconSize
ImageList_DrawEx
ImageList_Destroy
ImageList_DrawEx
ImageList_Destroy
ImageList_Draw
ImageList_Copy
ImageList_AddIcon
ImageList_Read
ImageList_DragMove
ImageList_GetImageCount
ImageList_Replace
InitCommonControls

user32

CopyIcon
IsMenu
CreateIcon
GetMenu
InsertMenuA
GetWindowTextA
GetCursor
DrawTextW
AlignRects
CopyImage
AppendMenuA
GetDlgItem
DialogBoxParamW
IsMenu
BlockInput
InsertMenuA
GetWindowTextA
IsWindow
GetFocus
CloseWindow
GetWindowTextLengthA
LoadCursorA
AppendMenuW
AlignRects
DialogBoxParamA
GetMenu
DrawTextA
EndDialog
DialogBoxParamA
GetWindowTextLengthA
AppendMenuW
AlignRects
GetMenu
BlockInput
GetWindowTextA
InsertMenuA
LoadCursorA
CopyIcon
GetDC
GetWindowTextLengthA
AlignRects
GetWindowTextA
LoadCursorA
AppendMenuW
InsertMenuA
DrawIcon
GetDlgItem
CopyIcon
DrawIconEx
CopyRect
GetCursor
CopyImage
CreateIcon
DrawTextA
DialogBoxParamW
GetFocus

kernel32

GetCPInfo
ReadConsoleA
FindFirstFileA
GetLastError
DeleteAtom
CopyFileExW
FindAtomA
GetComputerNameA
GetFileTime
GetStdHandle
GetFileTime
SetLastError
GetStdHandle
DeleteAtom
CreateDirectoryA
CreateThread
CopyFileExA
ReadConsoleA
CreateProcessA
FindFirstFileA
ReadFile
GetFileSize

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 62B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a2c225eb764f339179823adb9e9b01cf

Headers

File Characteristics

Imports

advapi32

comctl32

user32

kernel32

Sections

.text Size: 2KB - Virtual size: 2KB

.data Size: - Virtual size: 3KB

.rdata Size: 53KB - Virtual size: 52KB

.idata Size: 5KB - Virtual size: 5KB

.edata Size: 512B - Virtual size: 62B

.rdata Size: 512B - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 20KB

.text
Size: 2KB - Virtual size: 2KB

.data
Size: - Virtual size: 3KB

.rdata
Size: 53KB - Virtual size: 52KB

.idata
Size: 5KB - Virtual size: 5KB

.edata
Size: 512B - Virtual size: 62B

.rdata
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 20KB