21a3cf59011f52e4cf5c154a2dd8be6897aebc8359a98d2aeb7cccafed8809a6

Sharing

Copy URL

Twitter E-mail

General

Target

21a3cf59011f52e4cf5c154a2dd8be6897aebc8359a98d2aeb7cccafed8809a6
Size

572KB
MD5

4d9cbb23f27bbe912bba216b89781a49
SHA1

f66210d217fd762ed1c3a20bbc4a29f9577bd513
SHA256

21a3cf59011f52e4cf5c154a2dd8be6897aebc8359a98d2aeb7cccafed8809a6
SHA512

71cd956d57d096a067b49d95554ddf5637d2f426c3e0020c37f73449b1d86a0bdde745d541d946ca179460050e81dde23c06e382260079a22a2adcf3ce630d47
SSDEEP

12288:v2LYBdtkjPENebFx3lnj5Lz2oQSy2Vxpf+X2vzKUZe:ekBjpeRlz+wTpf+X2rK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21a3cf59011f52e4cf5c154a2dd8be6897aebc8359a98d2aeb7cccafed8809a6

Files

21a3cf59011f52e4cf5c154a2dd8be6897aebc8359a98d2aeb7cccafed8809a6
.dll windows:4 windows x86 arch:x86

1b94b4fd35ff49d50f712aa3b6d9867e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetStdHandle
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

SystemParametersInfoA

shell32

Shell_NotifyIconA

comctl32

ImageList_Destroy

gdi32

SetBkColor

wsock32

closesocket

shlwapi

PathFileExistsA

winmm

waveOutSetVolume

atl

ord42

rasapi32

RasHangUpA

winspool.drv

ClosePrinter

wininet

InternetConnectA

advapi32

RegOpenKeyExA

Exports

Exports

Strat

Sections

.text
Size: - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 373KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: - Virtual size: 343KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 564KB - Virtual size: 560KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1b94b4fd35ff49d50f712aa3b6d9867e

Headers

File Characteristics

Imports

kernel32

user32

shell32

comctl32

gdi32

wsock32

shlwapi

winmm

atl

rasapi32

winspool.drv

wininet

advapi32

Exports

Exports

Sections

.text Size: - Virtual size: 376KB

.rdata Size: - Virtual size: 25KB

.data Size: - Virtual size: 373KB

.data0 Size: - Virtual size: 343KB

.data1 Size: 564KB - Virtual size: 560KB

.reloc Size: 4KB - Virtual size: 348B

.text
Size: - Virtual size: 376KB

.rdata
Size: - Virtual size: 25KB

.data
Size: - Virtual size: 373KB

.data0
Size: - Virtual size: 343KB

.data1
Size: 564KB - Virtual size: 560KB

.reloc
Size: 4KB - Virtual size: 348B