21d74f98fba7ce3e803c5ebe5eaf958e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21d74f98fba7ce3e803c5ebe5eaf958e
Size

46KB
MD5

21d74f98fba7ce3e803c5ebe5eaf958e
SHA1

44a3492de02225157953c62de05cd9bb12078a73
SHA256

5f0b8d91f00b5a71c0ed27d0cc648c660f545e9d7da097f088c1ba3750c0c234
SHA512

2d4ad2a8a6742c96d3f62cb372e98e0b89cac86afd8671f69db5b4c1076e5553945260c9d23f09f0bfa274ffe2befb16dcfb262142c9474ba9dd21ed2b019835
SSDEEP

768:uVh2A/k1FwRh6+bYQ4G58pWDvySqfe4Z9KIa5OwG3j0/Z7XF+52e5Nu+vIV:uOAUwDbbYQ958Zz/9KI07Z00e5XIV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21d74f98fba7ce3e803c5ebe5eaf958e

Files

21d74f98fba7ce3e803c5ebe5eaf958e
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Exports

Exports

ResetSSDT
ServiceMain

Sections

packerBY
Size: - Virtual size: 113KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bero^fr
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE