220a8d9316b8d11af69236c3e48ed41b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

220a8d9316b8d11af69236c3e48ed41b
Size

22KB
MD5

220a8d9316b8d11af69236c3e48ed41b
SHA1

ed1efb30ec86775cfa2f547d4a55f65dab40b42e
SHA256

590734b74189703f9b442ad132bc345e221fb30380ef2a5b66adf3189bf5f804
SHA512

55ed236861ebbb4ff625ccc4b27ee01790c64fa74a1036faa0b88eb2997a1af53a4a3164f9e6623287288b15a19d99b491716b838ecacf0085dca7cc0c6f2290
SSDEEP

384:Wiv9NM67LuJP7xaQ0xh5K+BrIyucYetD++xh1iyzknYjc5SamYhNcngkv:W0fMrL0xhNBBYetDxhY1Yjcw3vngE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
220a8d9316b8d11af69236c3e48ed41b

Files

220a8d9316b8d11af69236c3e48ed41b
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 18KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE