6a22b9dc5407f41b4d51b73f16ce2b18 | Triage

Sharing

General

Target

6a22b9dc5407f41b4d51b73f16ce2b18
Size

72KB
MD5

6a22b9dc5407f41b4d51b73f16ce2b18
SHA1

ee42311f49d3d4e0e10125c54507e518531774b8
SHA256

8f39a396606dcc788773e3b3d1a19b55cc080ae48d6ba21d35a355c75170017b
SHA512

a0ffdd4f027f7b1d5390196f4c5fdedd266ef106b9ce7b457e8d8419a92f30dd8697fd1c707e12542720f989686054b8a422068b8c3e24af7e48805cf4f1d21a
SSDEEP

1536:GqhUQC4o9DSDuBUkLVHLpProTsp6+JoTsYXfuBzATShsqp4wZysy:RUp4Qeu+6prV6++nG+WuUfy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a22b9dc5407f41b4d51b73f16ce2b18

Files

6a22b9dc5407f41b4d51b73f16ce2b18
.exe windows:6 windows x86 arch:x86

1f83362a57e6d6a2f15132c167d7f42c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
FileTimeToSystemTime
VirtualAlloc
VirtualProtect
GetFileInformationByHandle

mpr

WNetUseConnectionA
WNetCancelConnection2W
WNetGetLastErrorA
WNetAddConnection3W
WNetGetUniversalNameA

winspool.drv

EnumMonitorsW
ord215
GetPrintProcessorDirectoryA
FindNextPrinterChangeNotification
EnumPortsA
GetJobW
AddPortA

gdi32

ExtEscape
Escape
SetMapperFlags

msi

ord116
ord41
ord22

user32

MessageBoxW

Sections

.text
Size: 512B - Virtual size: 210B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ