421a4b6c4620a71cb49715911b2f6ac463ce854859786dcfe6f0ff9e7487d9c6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

421a4b6c4620a71cb49715911b2f6ac463ce854859786dcfe6f0ff9e7487d9c6
Size

7KB
MD5

d3f63420d9790523f06f2a8edbef4a8f
SHA1

1bd3d0c23ed54336e0528b12a6902c43541a66ae
SHA256

421a4b6c4620a71cb49715911b2f6ac463ce854859786dcfe6f0ff9e7487d9c6
SHA512

904946c6dc79989175af6a371248a731fc1f50a5b837c06c2bdee73e2f6425f8fd01e7ef71f2b962dfb549fb95bb19b04526def45b67f9a3eb11950c0eacf464
SSDEEP

192:wtjaBkMJACDV3GLI25X77qNBAYwYzQoM9610QTkIHXtD8:okXnsQTkI3tw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
421a4b6c4620a71cb49715911b2f6ac463ce854859786dcfe6f0ff9e7487d9c6

Files

421a4b6c4620a71cb49715911b2f6ac463ce854859786dcfe6f0ff9e7487d9c6
.exe windows:4 windows x86 arch:x86

8a82b4dad9025c7f1eba7c50c68d99db

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
lstrcatA
lstrcpyA
WideCharToMultiByte
GetModuleFileNameW
WaitForSingleObject
CloseHandle
ReadFile
PulseEvent
HeapAlloc
GetProcessHeap
HeapFree
GetCommandLineW
Sleep
ExitProcess
GetModuleHandleA
GetCommandLineA
SetEvent
CreateThread
CreateProcessA
ExitThread
Process32Next
Process32First
CreateToolhelp32Snapshot
ResetEvent
FindNextFileW
OpenEventA
WriteFile
GetModuleHandleW

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey

user32

CreateWindowExA
CharUpperA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
DestroyWindow
PeekMessageA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE