81d21cd8c3ee65fb54aec140e15852eb2a312499d68f8a0534adb2090d46fabd | Triage

Sharing

General

Target

81d21cd8c3ee65fb54aec140e15852eb2a312499d68f8a0534adb2090d46fabd
Size

713KB
MD5

0abe1248ff2a10c0197d571dbf89bc8e
SHA1

1ff911dd1db0c846da443f3d7916d85d3950be72
SHA256

81d21cd8c3ee65fb54aec140e15852eb2a312499d68f8a0534adb2090d46fabd
SHA512

e1dfc8b25ae02772ceb8d7f17567c2e981b6a2941e12b5b265590825939910ba155a01d75af7629081c000a968f2b52a324d43057b317345dff2f58f6bd52e63
SSDEEP

12288:lsVgdnD4Rh4YkOEziDOWdzsX2ltIO9pBTgOQVC0LD55uHCzOiEJmc/07ue8N:WVgdnWh4YkOHzz44IO9pBTgOuD55uizo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81d21cd8c3ee65fb54aec140e15852eb2a312499d68f8a0534adb2090d46fabd

Files

81d21cd8c3ee65fb54aec140e15852eb2a312499d68f8a0534adb2090d46fabd
.exe windows:4 windows x86 arch:x86

5ce5924a1cb8e97eec304d7039abad0f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimes
GetFirmwareEnvironmentVariableW
GetProcessHeap

ntdll

NtQueryTimerResolution
RtlStartRXact
RtlDestroyEnvironment

user32

GetCursor

Sections

.text
Size: 709KB - Virtual size: 712KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE