d022e4bc808553dff0b5a789d67736650b091bd29c92e73d06a0a89b04dc52d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d022e4bc808553dff0b5a789d67736650b091bd29c92e73d06a0a89b04dc52d6
Size

276KB
MD5

5190ed5d00a8253d1feb750a6a25de0d
SHA1

785bebd8f22b9613908cc94b675b55b5e80b7beb
SHA256

d022e4bc808553dff0b5a789d67736650b091bd29c92e73d06a0a89b04dc52d6
SHA512

b1efd9b24a5f44906f95b36afe06746e27cb34e8a7d67ac998ff1e2889cbbfe77e261b801cdf4fbaf4f43ddd7da70175f0bd58651dae2d1645dc71e87d8b6896
SSDEEP

6144:NVG0F/iG5MEbW3dSe6n0wjI6DN+qfcdLS5jhovCK5V4o9nVISb9z:HVhiG5bbWN6n0SIw+qpJeV7v9nVISB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d022e4bc808553dff0b5a789d67736650b091bd29c92e73d06a0a89b04dc52d6

Files

d022e4bc808553dff0b5a789d67736650b091bd29c92e73d06a0a89b04dc52d6
.exe windows x64

ea86c7d9015549f77aac07c5a232a278

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

SetErrorMode
VirtualAlloc
VirtualProtect
GetProcessHeap
HeapAlloc

advapi32

CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptDeriveKey
CryptDecrypt
CryptDestroyKey
CryptDestroyHash
CryptReleaseContext

Sections

.text
Size: 1024B - Virtual size: 569B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 271KB - Virtual size: 270KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ