21f53c5fc589991202624ea23d4e2bd4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21f53c5fc589991202624ea23d4e2bd4
Size

9KB
MD5

21f53c5fc589991202624ea23d4e2bd4
SHA1

28a65704604b2465591988fdc8a11de0c4e5edf1
SHA256

9a1b5123ea92a0c97025fc535140196623608aacdf97986000af37ef95b3787f
SHA512

2886a7567bfb90883dd99201115edb5b865d36f025dc3cfac401560412f4e3adf9ff6aa9735fdc3c599f5f08c8fe67abc4eb93e384060a6c6a30a5fbc40fbb7c
SSDEEP

192:Ki6yD0SU4DrzKz/EH6mfrmTpFu1pyafdHTeT6c5hQGYc1:J6y/U8LhfMpFu1py2HyWc5hQFc1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21f53c5fc589991202624ea23d4e2bd4

Files

21f53c5fc589991202624ea23d4e2bd4
.exe windows:4 windows x86 arch:x86

cc2a7c4843ce4acee774e5978eda7c08

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
EnumWindows
MoveWindow
IsWindowVisible
GetWindowTextA
wsprintfA

kernel32

ExitProcess
FindClose
FindFirstFileA
GetLocaleInfoA
GetModuleFileNameA
GetProcessHeap
GetShortPathNameA
GetSystemTime
GetTempPathA
GetVersion
GetVersionExA
DeleteFileA
HeapAlloc
HeapFree
Sleep
SystemTimeToFileTime
WriteFile
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA
GetEnvironmentVariableA
GetLastError
CreateProcessA
CreateFileA
CloseHandle
CreateMutexA
GetWindowsDirectoryA
GetCommandLineA

shell32

ShellExecuteA

advapi32

RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
GetUserNameA

wininet

HttpOpenRequestA
HttpSendRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetQueryDataAvailable
InternetReadFile
HttpQueryInfoA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE