22b18bb7351622c632d5f46b9d92f7eb

General

Target

22b18bb7351622c632d5f46b9d92f7eb
Size

131KB
MD5

22b18bb7351622c632d5f46b9d92f7eb
SHA1

618cbd79ba54e9bea5b4bbfef595af33ef1f240e
SHA256

21ecb9fc731a607d811ed709f141bf19e628e9dbab9cce6be5e8cbbd5fa15f11
SHA512

4644ca5366f682c89761058fb9e5267ac1ba75c2298bc0d2b81f307336b3707dbd8075361ceeb8cf907f4dd0ad33ed9f855a8c36cf5714fdf45741d0deacb856
SSDEEP

1536:CzfPcSLwvomE73JEwTfHatTUjKxLIyvdniejz3XoNzLfalYZM8PP8zxV5I31Sq8D:Qgojr6wjdalYZpn2xV5kV8AW33+mr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22b18bb7351622c632d5f46b9d92f7eb

Files

22b18bb7351622c632d5f46b9d92f7eb
.exe windows:4 windows x86 arch:x86

f8d9690a2c80583bccd1edf84996d2c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CopyFileA
DeleteFileA
GetCommandLineA
GetCurrentDirectoryA
GetTempPathA
GetCurrentThreadId
GetModuleHandleA
GetModuleFileNameA
GetTempFileNameA
FindFirstFileA
FindClose
GetFileAttributesA
GetTickCount
GetPrivateProfileStringA
CloseHandle
GetLastError
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
RtlUnwind
GetSystemTimeAsFileTime
GetStartupInfoA
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetConsoleMode
GetConsoleOutputCP
WriteFile
VirtualAlloc
VirtualQuery
ReadFile
GetConsoleCP
SetStdHandle
SetConsoleCtrlHandler
CreateFileA
MultiByteToWideChar
SetFilePointer
WideCharToMultiByte
SetEndOfFile
SetCurrentDirectoryA
SetEnvironmentVariableA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

user32

GetDesktopWindow
GetWindowRect
SetWindowPos
UnhookWindowsHookEx
SetWindowsHookExA
CharLowerA
GetActiveWindow
MessageBoxA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

Sections

.text
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f8d9690a2c80583bccd1edf84996d2c5

Headers

File Characteristics

Imports

kernel32

advapi32

user32

comdlg32

Sections

.text Size: 84KB - Virtual size: 84KB

.rdata Size: 13KB - Virtual size: 12KB

.data Size: 4KB - Virtual size: 3.3MB

.rsrc Size: 28KB - Virtual size: 27KB

.text
Size: 84KB - Virtual size: 84KB

.rdata
Size: 13KB - Virtual size: 12KB

.data
Size: 4KB - Virtual size: 3.3MB

.rsrc
Size: 28KB - Virtual size: 27KB