a21820c36efbfba24817017b8593f29fa2b028d5e179953d4769283b55808853

Sharing

Copy URL Twitter E-mail

General

Target

a21820c36efbfba24817017b8593f29fa2b028d5e179953d4769283b55808853
Size

62KB
MD5

53bf0c919600b02b65621bc7af270e3a
SHA1

34d45b597f33ddd865a64479dd94e518f77b9197
SHA256

a21820c36efbfba24817017b8593f29fa2b028d5e179953d4769283b55808853
SHA512

4e9f270d0fb6ffa4eb8d772a8e1e121df00b9c3379a5ddd8a16aace535c18c25d5e3e3ca64f4fbbc69c6c501b654a3d9fdae0b8450d1a1d95c3c1393762ea8ee
SSDEEP

768:Ebip1nfDrT2DBaBw9HojzuHFYQ24q1zCBvLxy4LDIGzWmbtpcYudLOF4PJqTz24:uK7rw829IjoFPqzCBhT0YaLOFicz/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a21820c36efbfba24817017b8593f29fa2b028d5e179953d4769283b55808853

Files

a21820c36efbfba24817017b8593f29fa2b028d5e179953d4769283b55808853
.exe windows:4 windows x86 arch:x86

2edb8c884322ec8ec23f7042161d127c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCreateKeyExA
RegDeleteKeyA
RegFlushKey
RegEnumKeyW
RegReplaceKeyA
RegQueryValueExW
RegQueryInfoKeyW
RegLoadKeyW
RegDeleteKeyW
RegGetKeySecurity
RegOpenKeyExA
RegDeleteValueA
RegEnumValueW
RegEnumKeyA
RegOpenKeyW
RegQueryValueExA
RegOpenKeyA
RegLoadKeyA
RegQueryValueA
RegEnumKeyExA
RegEnumValueA
RegEnumKeyExW
RegDeleteValueW
RegQueryValueW
RegReplaceKeyW
RegQueryInfoKeyA
RegCreateKeyW
RegCreateKeyExW
RegOpenKeyExW
RegOpenKeyExW
RegEnumKeyW
RegEnumValueW
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExW
RegLoadKeyA
RegQueryInfoKeyW
RegGetKeySecurity
RegLoadKeyW
RegDeleteValueA
RegOpenKeyA
RegEnumKeyExA
RegQueryValueA
RegFlushKey
RegQueryInfoKeyA
RegCreateKeyW
RegEnumValueA
RegDeleteValueW
RegReplaceKeyA
RegEnumKeyA
RegQueryValueExW
RegQueryValueExA
RegReplaceKeyW
RegQueryValueW
RegOpenKeyW
RegDeleteKeyW
RegEnumKeyExW

user32

DrawTextW
GetWindowTextLengthA
CreateIcon
AppendMenuW
GetCursor
EndDialog
DrawTextA
LoadCursorA
AppendMenuA
DialogBoxParamA
CloseWindow
IsWindow
CopyImage
GetMenu
CalcMenuBar
GetDC
DialogBoxParamW
InsertMenuA
DrawIconEx
CopyIcon
GetFocus
DrawIcon
GetDlgItem
GetWindowTextA
CopyRect
LoadMenuA
AlignRects
IsMenu
BlockInput

kernel32

GetLastError
GetModuleFileNameA
GetLastError
GetFileType
GetLastError
lstrcpynA
GetLastError
GetLastError
GetLastError
GetLocalTime
GetLastError
GetCPInfo
GetLastError
lstrcmpA
GetLastError
FreeLibrary
GetLastError
GetStringTypeW
GetLastError
lstrcatA

Sections

.t99t
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.r59ta
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 3KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.id77a
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2edb8c884322ec8ec23f7042161d127c

Headers

File Characteristics

Imports

advapi32

user32

kernel32

Sections

.t99t Size: 10KB - Virtual size: 10KB

.r59ta Size: 35KB - Virtual size: 35KB

.edata Size: 3KB - Virtual size: 48KB

.id77a Size: 7KB - Virtual size: 7KB

.rsrc Size: 1024B - Virtual size: 4KB

.t99t
Size: 10KB - Virtual size: 10KB

.r59ta
Size: 35KB - Virtual size: 35KB

.edata
Size: 3KB - Virtual size: 48KB

.id77a
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 1024B - Virtual size: 4KB