a21687220bf68e66f3f4e2f2d8130228 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a21687220bf68e66f3f4e2f2d8130228
Size

110KB
MD5

a21687220bf68e66f3f4e2f2d8130228
SHA1

1dd0ebca0cae8472aea2c2316ba05bcbd1ba61ff
SHA256

e00efa8dbce70dbebdf718b46edace4657e20c8b43c24eee070048523295a7cf
SHA512

03b489f6a98c32e0dbf9fc86246d68195622d0b72c1559a18d661a4b993af5e8d4489eac2d7d49505139455d907360cdd06bbbaf9155e68c0a69f3fd0815ec2c
SSDEEP

3072:x9ccoMwUd6WFhWJpXN2nMxTkPPNRM9ofSa5d0qhJKO:xOqw6WnLaNRM9ofSydj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a21687220bf68e66f3f4e2f2d8130228

Files

a21687220bf68e66f3f4e2f2d8130228
.exe windows:4 windows x86 arch:x86

9262ce84af5b2446a3385c4b86e8ed6d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC
CharNextA
TranslateMessage
GetParent
GetSystemMetrics
GetDesktopWindow

gdi32

DeleteObject
CreatePalette
RectVisible
RestoreDC
LineTo
SelectObject
DeleteDC
GetObjectA
SetTextAlign
GetPixel
GetTextMetricsA
SelectPalette
CreateFontIndirectA
GetStockObject
CreateCompatibleDC
SetMapMode

kernel32

GetSystemTime
QueryPerformanceCounter
GlobalFindAtomA
lstrlenA
GetCommandLineA
lstrlenW
VirtualAlloc
GetWindowsDirectoryA
lstrcmpiW
RemoveDirectoryA
VirtualFree
DeleteFileA
GetModuleHandleA
CopyFileA
RemoveDirectoryW
FindClose
lstrcmpiA
lstrcmpA

glu32

gluNurbsCallback

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ