d21830d99cf57be58e02108b7f575990N[.]exe | Triage

Sharing

General

Target

d21830d99cf57be58e02108b7f575990N.exe
Size

56KB
MD5

d21830d99cf57be58e02108b7f575990
SHA1

47dfaa772b24f4d0be828187bbe4144d7bbfe417
SHA256

d5405a7c56ee2f9af59173e32825a570baf6e399580adb60bb388f0f996b8c69
SHA512

fface49aea17f6d4cc2d9b9fb42da847eea5ea358337dbdaadfd446a2eefac328a1bd3350aa31c0b5de5f8fd1971a104cac8340d087fb9e2868ffa5352bc7acc
SSDEEP

1536:4ouB9ilKki6ezH8P0d//jyAp0TZwIaN1DLKBI2K68B:4o5ETMA/jyAp019KLKBIf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d21830d99cf57be58e02108b7f575990N.exe

Files

d21830d99cf57be58e02108b7f575990N.exe
.exe windows:4 windows x86 arch:x86

2d9b980f826cc2d20b33127ae372823e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BackupWrite
FatalAppExitW
InitOnceComplete
DeactivateActCtx
ShowConsoleCursor
SetThreadPreferredUILanguages
GetHandleInformation
ReadFileScatter
K32EmptyWorkingSet
VirtualLock
GetTimeZoneInformationForYear

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE