c21701ec1bede22bd2f5fe17b758902d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c21701ec1bede22bd2f5fe17b758902d
Size

6KB
MD5

c21701ec1bede22bd2f5fe17b758902d
SHA1

ca314a225b9cfb23124ded8d8708d8b8e1913197
SHA256

950a25f911a86dc9c7e82e279342955af80ed8cf666143a4d4f15ce0e215a826
SHA512

8bb53565a18f31bd05b9510f4c1e1a2af25625310cfe2b0a4876ac9b196891a1b8f1190ea865acf70d1dfff50b9616dd1f2b728519aa26f6a7b5be3347abccd8
SSDEEP

96:lnaiC/bcTVjEAzef9pOsXdXDcBN7tYNUW1iomXP8yxQW4gq1E:laiC2EpDXyZyNUNPRuwq1E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c21701ec1bede22bd2f5fe17b758902d

Files

c21701ec1bede22bd2f5fe17b758902d
.exe windows:4 windows x86 arch:x86

1c3173339346362d779ed15cb9075ff1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadStringPtrA
OpenSemaphoreW
FindNextFileA
CallNamedPipeA
EnumResourceLanguagesA
lstrcmpW
SearchPathA
GetCompressedFileSizeA
CopyFileExA
CreateMutexA
CopyFileW

user32

ModifyMenuW
GetAltTabInfoA
WinHelpA
CallMsgFilterW
OpenDesktopA
CharLowerBuffW
SetUserObjectInformationA

gdi32

GetCharWidth32A
AddFontResourceA
GetObjectA
DeviceCapabilitiesExA

Sections

.tls
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1024B - Virtual size: 693B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ