22f413bb6411dbe5da31aac39b212fcb | Triage

Sharing

General

Target

22f413bb6411dbe5da31aac39b212fcb
Size

216KB
MD5

22f413bb6411dbe5da31aac39b212fcb
SHA1

be64a7f233bf168b7a8cc6e187331c287331697e
SHA256

47d215ad63289a385c14c20cc5164eb317ac80a16964df02b98d1db02c641f02
SHA512

ce5b97df0c8faac5f680f59b8e8c837a9ec2fc5d34ec96e723bf71073611279744621f0b3682538f4617407b9dfda0422085dc7309d23ae1549e2d1f92de4670
SSDEEP

6144:0Mcn2/EdwJmuqJS3u4eYepLjAfMSMq7YSbPDVjkhq0:0McnNdw4JS3R4LjI7rDVZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22f413bb6411dbe5da31aac39b212fcb

Files

22f413bb6411dbe5da31aac39b212fcb
.exe windows:5 windows x86 arch:x86

95b6b72acdf9337e3481838a7f6cfd0d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

OemKeyScan
SetWindowPos
SetClassLongA
ValidateRect
IsCharAlphaNumericW
SetWindowTextA
GetActiveWindow

ole32

CoLoadLibrary
IIDFromString

kernel32

GetSystemTimeAsFileTime
SizeofResource
HeapDestroy
HeapFree
GlobalLock
SetFileAttributesA
LocalAlloc
LocalFree
GlobalUnlock
GetSystemPowerStatus
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
FreeLibrary
GetProcAddress
LoadLibraryA

Sections

.text
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ