21fbfa6f8a259740f2356e341136eb790334549edf9c1f220d87658f10fa6bc2

Sharing

Copy URL Twitter E-mail

General

Target
21fbfa6f8a259740f2356e341136eb790334549edf9c1f220d87658f10fa6bc2
Size 119KB
Sample260906-151ntstejc
SHA256 21fbfa6f8a259740f2356e341136eb790334549edf9c1f220d87658f10fa6bc2
MD5 5d458b3eb54e6aa1dfc479e6ab17632f
SHA1 9fe80716c805258fd1b5c3e16eb74bf8febee644
SHA512 e8ed434802414f6066bfe9cb6d722621be33cf6307e303cc06df522526bc6035f6f338d7479e35a694b3db39446b1e60686dadca23bc2114f75db4ba7acc04c6
SSDEEP 1536:uAQZzXN394FL8jPjbQpJjh3FutuNgIRhbnW/sPra:uDdNCTbW/r
TLSH
T162C37384B7385892FAB3963E15E68231177DFBE086E2870799047B211D63AD06DD333B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21fbfa6f8a259740f2356e341136eb790334549edf9c1f220d87658f10fa6bc2

File Explorer

21fbfa6f8a259740f2356e341136eb790334549edf9c1f220d87658f10fa6bc2

.exe 119KB

21fbfa6f8a259740f2356e341136eb790334549edf9c1f220d87658f10fa6bc2

IMPHASH bafebe7483fdf0da058ab6a62c723c1b
SHA256 21fbfa6f8a259740f2356e341136eb790334549edf9c1f220d87658f10fa6bc2
MD5 5d458b3eb54e6aa1dfc479e6ab17632f
SHA1 9fe80716c805258fd1b5c3e16eb74bf8febee644
SHA512 e8ed434802414f6066bfe9cb6d722621be33cf6307e303cc06df522526bc6035f6f338d7479e35a694b3db39446b1e60686dadca23bc2114f75db4ba7acc04c6
SSDEEP 1536:uAQZzXN394FL8jPjbQpJjh3FutuNgIRhbnW/sPra:uDdNCTbW/r
TLSH
T162C37384B7385892FAB3963E15E68231177DFBE086E2870799047B211D63AD06DD333B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13376

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

12KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

4KB

Virtual Size

192B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

224B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

12KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

624B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/14

Size

4KB

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/29

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/41

Size

4KB

Virtual Size

723B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

4KB

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/80

Size

4KB

Virtual Size

109B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/91

Size

4KB

Virtual Size

471B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/107

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/123

Size

4KB

Virtual Size

63B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

21fbfa6f8a259740f2356e341136eb790334549edf9c1f220d87658f10fa6bc2

kernel32

ntdll

ole32

oleaut32

shell32

ucrtbase

user32

generic