22f402ebf33d13d401af086fd3c09a40 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22f402ebf33d13d401af086fd3c09a40
Size

158KB
MD5

22f402ebf33d13d401af086fd3c09a40
SHA1

648f31b6aabb54c4a0ce112b6c6eac8447f4fc25
SHA256

791bdc9ba878616e55918fed62a0517378c7de295745b7c6b43e4f92c6451548
SHA512

7dfa99d1b2bd256d68031f1e19c8243deaa274102b3ca49cce95802770ef61fee97ec8cb1e4116ae8c34bf7d92fe857962b174774ab5ba91f91abaa3c54c033a
SSDEEP

1536:lHAMrUUxCuq22G0qaODOjBjfXZOCQLz7YX:pJwjODKZgL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22f402ebf33d13d401af086fd3c09a40

Files

22f402ebf33d13d401af086fd3c09a40
.exe windows:5 windows x86 arch:x86

9f7306138c515d2aa976d2ad60c42aa1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DialogBoxParamW
AppendMenuA

kernel32

ExitProcess

advapi32

RegLoadKeyA
RegQueryValueExA
RegCreateKeyA

Sections

.beihn
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.gigjj
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bhlb
Size: 84KB - Virtual size: 432KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.obla
Size: 512B - Virtual size: 290B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ