96c21e608ea26ae6ce6cf8726b6d7d6a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96c21e608ea26ae6ce6cf8726b6d7d6a
Size

410KB
MD5

96c21e608ea26ae6ce6cf8726b6d7d6a
SHA1

83b6ab2648dacb4b53ea93844b81a3073bcd7d2b
SHA256

d3a2f3f1cd21ac674020770984939ee3fbb6d0b8d714a6dba5f2a05b3d85ac75
SHA512

15608aeb69b5bedd3fe049791959ba1529434cd96e7dc6a35a421f07a7d0567f648666b5a1d7e171918fce2497528d09d5cad13f196f9f7277215ed11863675e
SSDEEP

6144:B1+CUlCq+4kdSZTDfN+MDdsOCHKvu/essZUlDBmtvZcevi8zX7lAxHd:B1aH+4kdSZ3ogdMKvQ2ZyDBKBK8zuxH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96c21e608ea26ae6ce6cf8726b6d7d6a

Files

96c21e608ea26ae6ce6cf8726b6d7d6a
.exe windows:4 windows x86 arch:x86

2a64805a0ad57423f1848d7ba82b409d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

Sections

pec1
Size: 274KB - Virtual size: 700KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 760KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pec
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE