1e22bc9a2c4c569c209e7032122dfbd3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e22bc9a2c4c569c209e7032122dfbd3
Size

488KB
MD5

1e22bc9a2c4c569c209e7032122dfbd3
SHA1

5ad773b858d144b286e1c86303b4f47c2ddfc5e2
SHA256

f030e10d21634f691aa195c32d89d384f825796b7249b1c7e195d2e460b6a952
SHA512

e218e4b49d043f9b62f9297e4dc2996be404badb65a39523bfe829315b517d8bc9d865be43b24208ccaaed7765597f3455a9ce0d651da00a4155fea4a2481152
SSDEEP

12288:lmzvwetjtSUrBhm5MWPtCCYHX/6OQswIYJcKg2X9xI6d:okUr+66tCCaX/6OQswJ9nI6d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e22bc9a2c4c569c209e7032122dfbd3

Files

1e22bc9a2c4c569c209e7032122dfbd3
.exe windows:4 windows x86 arch:x86

20c25a1f48e79e02b7cecf49e00ae9f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PeekMessageW
GetMessageExtraInfo
GetClipboardSequenceNumber

kernel32

GetCommandLineA

Sections

.text
Size: 479KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 345B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE