521d6284f8e84726971cf2175fb64ae8 | Triage

Sharing

General

Target

521d6284f8e84726971cf2175fb64ae8
Size

44KB
MD5

521d6284f8e84726971cf2175fb64ae8
SHA1

0d68a57dfc520fd55ebc32dde95559574242e251
SHA256

1817102938584febe6aa21f48b32e298ca260d31f3f0599daeb6b876a1e39910
SHA512

0ccc8ae880f7d6989bbc9ef7bbbf3ff64f187830945ee5dd3910f7933e792865cfd0d024f7fe381b6ccab21bcde5a5dab006173bfb594641e01cdd619519d2d2
SSDEEP

768:EndnFzStWpdJN+dO6wrL7IBX02Dunu+nspI7lUOzuTmiHCDK1eZUhnbQcJX:IdWdO6O7cXiznspIZU5TLiVcnbQcJX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
521d6284f8e84726971cf2175fb64ae8

Files

521d6284f8e84726971cf2175fb64ae8
.exe windows:4 windows x86 arch:x86

ac984c09e533b16a5fe04b8aa0014ded

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
SetErrorMode
CreateFileA
WaitForSingleObject
lstrcpynA
SetUnhandledExceptionFilter
GetStdHandle
RaiseException
OpenProcess
GetTimeZoneInformation
LCMapStringW
DeviceIoControl
GetThreadContext
GetSystemTimeAsFileTime

msvcrt

qsort
_itoa
fopen
_strlwr
wcscmp
_pctype
abs

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ