21ef1deba5cf0c0cbf0c25ff00ce2921 | Triage

Sharing

General

Target

21ef1deba5cf0c0cbf0c25ff00ce2921
Size

8KB
MD5

21ef1deba5cf0c0cbf0c25ff00ce2921
SHA1

8fc4579e2a9be7f0e6a5e3ae61a8440643bac017
SHA256

082173562f5628bef54b4efd2dc79ac72123a6307e3e94fe19cacd00cee7f916
SHA512

e6e5ca2f6b2ece9924dee736306e9b4bae35e3ce93d9144dc097d7d8ea49ea2e5eae72bdfbd1238b3ec01cf237a97e18a8ec7372bc4cb43ed89022146a7e86fe
SSDEEP

192:SyRtHGGgGGGGGGGg1E2kHKaKdHyKQ0XSkkFo9en:J/HGGgGGGGGGGwmKfyZFo9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21ef1deba5cf0c0cbf0c25ff00ce2921

Files

21ef1deba5cf0c0cbf0c25ff00ce2921
.dll windows:4 windows x86 arch:x86

d7353230186a8cea96b0feba799c5e8d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
lstrlenA
Process32Next
lstrcatA
Process32First
CreateToolhelp32Snapshot
WinExec
DeleteFileA
WriteFile
lstrcmpA
CreateFileA
GetSystemDirectoryA
Sleep
lstrcpyA
CreateThread
RtlUnwind
GetStringTypeW
GetStringTypeA
MultiByteToWideChar

ws2_32

send
gethostname
connect
socket
gethostbyname
inet_addr
htons
WSAStartup
recv
shutdown
closesocket
WSACleanup

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ