21f95c1be99671e78321765366b67bb13b3b6ad6e811ced8f1f6b1ba991a638a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21f95c1be99671e78321765366b67bb13b3b6ad6e811ced8f1f6b1ba991a638a
Size

146KB
MD5

eb3cddbe7d99248c5f52370c27107d4b
SHA1

25abecad8cde4b5b2f283af53e364ee79712ffda
SHA256

21f95c1be99671e78321765366b67bb13b3b6ad6e811ced8f1f6b1ba991a638a
SHA512

051d5e70ae3924d0905bdf69a7869ab592ffcae2582e31eee3ef81a3bbc6d801bd7d2eaf05d501f4e044e258413470cad28f45ab23b48afcec91bc8ffd239682
SSDEEP

1536:zfc4XWCpByVriGZnGVrm2n14kogViLV2cB84g39YM9kyJRWDqh58rvgySi/0:44XWCpg2GZnGY2ni5V2n9k4TP8rvgyg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21f95c1be99671e78321765366b67bb13b3b6ad6e811ced8f1f6b1ba991a638a

Files

21f95c1be99671e78321765366b67bb13b3b6ad6e811ced8f1f6b1ba991a638a
.dll windows:4 windows x86 arch:x86

bc928bd8c8559ab187286893c6e12bcc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

xpprt1

?prepareOpStack
?ehIsError
?ehSetContext
?setjmp
?exeNativeError
?exeStackUnwind
?momSOn
?conNewString
_osiDllRemove
_osiDllInsert
__This_DLL_needs_version_1_90_0

Sections

.text
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xpp
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 334B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ