22d89ca5a72f33b6a9ce093160f59edf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22d89ca5a72f33b6a9ce093160f59edf
Size

33KB
MD5

22d89ca5a72f33b6a9ce093160f59edf
SHA1

6fac02c414a4630a8d24401786a15ff2ef76731d
SHA256

079b504cceb47f9d9a56c34e5cfedc2d7713b2eb53d25f2377c2c62594b9176e
SHA512

aa158a8abce853c9368c8c65ec0d15e12e1e595b0d11dd79086c783096c3fbd245c2b2a87e3bcb17678689d1167005df55983d81c9b5fb4ecc87062c8bbb3b73
SSDEEP

768:an3SBAdJ22b2xpj3wnyaX6+RjUuQdTn9cHdx/s6hz9Lo:8SBAbp28LbdR/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22d89ca5a72f33b6a9ce093160f59edf

Files

22d89ca5a72f33b6a9ce093160f59edf
.exe windows:4 windows x86 arch:x86

dd211e2c83c9b4642c33fed8c81b90d3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

strncmp
strchr
sprintf
_itoa
_chkstk
atoi
strstr
strncpy
memset
RtlRandom

kernel32

lstrcpynA
VirtualFree
VirtualAlloc
OpenProcess
SetCurrentDirectoryA
GetTimeZoneInformation
GetCurrentProcessId
GetWindowsDirectoryA
GetSystemDirectoryA
ReadFile
Sleep
CloseHandle
WriteFile
SetFilePointer
CreateFileA
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
HeapFree
HeapAlloc
GetProcessHeap
GetSystemTime
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetLastError
GetLocalTime
GetCurrentDirectoryA

psapi

GetModuleFileNameExA

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE