21eb174551a5a37f2c443d85421b7c6ff137c87b37f76b221261421e060aaed7 | Triage

Sharing

General

Target

21eb174551a5a37f2c443d85421b7c6ff137c87b37f76b221261421e060aaed7
Size

6KB
MD5

98968c0dd46739a846a59e116440ca1e
SHA1

d9143169f9d903955ea0ae6f3673b20b12755c67
SHA256

21eb174551a5a37f2c443d85421b7c6ff137c87b37f76b221261421e060aaed7
SHA512

f84fd124d656332ed7b0a4c781f4b91cf2f74035a5116ff8d2934ebeb63c6dbcc2bae892c1dc6aab75f3219ee28f8c314e90b11d22a9f4ac297fe2c94d662945
SSDEEP

48:StEbt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9uH:CM0mIGnFc/38+N4ZHJWSY9FI5WqRx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21eb174551a5a37f2c443d85421b7c6ff137c87b37f76b221261421e060aaed7

Files

21eb174551a5a37f2c443d85421b7c6ff137c87b37f76b221261421e060aaed7
.exe windows:5 windows x64 arch:x64

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ