21f24bc679e077e6773eefc98cc7cb4d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21f24bc679e077e6773eefc98cc7cb4d
Size

409KB
MD5

21f24bc679e077e6773eefc98cc7cb4d
SHA1

40b0c9f2610bb4a68667834dcdeae76fbd49bf5d
SHA256

568e059b89bc4afd5e5bc6d38c61c3b8a224c68903e214117d2e4adff6ea115f
SHA512

8b11c9f91d329154c36685a7d0e864809767cddb2621f7abaa6712116c07c479e84239d5e4ff6a22b8ddd7dc533dcfe95511f85e65dbbea95329313587dee80e
SSDEEP

12288:JWm+nVnBTim1eE288R8mMsx4NSSGeyxTceyJXPXxwk:HQVf1MamNKNSXewTcp/Xxwk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21f24bc679e077e6773eefc98cc7cb4d

Files

21f24bc679e077e6773eefc98cc7cb4d
.exe windows:1 windows x86 arch:x86

9eaed3f3512622bcbbbad308a947a163

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
VirtualAlloc
VirtualFree
EnumUILanguagesA
GetProcAddress
ExitProcess

gdi32

CloseEnhMetaFile
CloseFigure
ColorCorrectPalette

Sections

.idata
Size: 512B - Virtual size: 330B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 215B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 33KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE