2c21cbe6085c680c0eb4f0ad9a78bc4a | Triage

Sharing

General

Target

2c21cbe6085c680c0eb4f0ad9a78bc4a
Size

23KB
MD5

2c21cbe6085c680c0eb4f0ad9a78bc4a
SHA1

ca0d29919b12701192ba677177e6060098452eca
SHA256

7334dd3275b4cbeb1fb5ccc5e48a7badd83ebc84abf01d7f6a4ae6ac204f7f41
SHA512

a55c32f07b9ac6da184d893411e9a1a4bdf2533638e458f6a5746e009b658dcd595f4c3c53bcf615376d98a9308d4b41a318262ed46ee07596f114fd2c35dd31
SSDEEP

384:t0MuVfGQtTpWhUKPYd3HUppOFgUOOCawxYM5rUatEKDx:tyZVtlX30yFgU945gg1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c21cbe6085c680c0eb4f0ad9a78bc4a

Files

2c21cbe6085c680c0eb4f0ad9a78bc4a
.exe windows:4 windows x86 arch:x86

f6ced02617181defbf7e17c76a9427b1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WriteFile
Sleep

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

HlinkNavigateString

Sections

.text
Size: 23KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE