226be67cc237922b0c7bfc36b7ff5373 | Triage

Sharing

General

Target

226be67cc237922b0c7bfc36b7ff5373
Size

25KB
MD5

226be67cc237922b0c7bfc36b7ff5373
SHA1

9730a899db9679fb0c80ab903c39c047df200a27
SHA256

cb613918e3287b71679a7695798150aeea22b502da66dd0a974227d044a66b61
SHA512

f3772432a19cbc18c2e756896d78388f229c7db7752b358c5d4c9ed53e5f92d42a94f584a7bc99622033c6ea1dd40b8cabc3e9fb34677182f0723634ac786f0e
SSDEEP

384:X0HfPwQI6XRbC8Z+vHtaHz6cHU2uTzGjAZ7aPv3xiYtTvkUzuCILd9KzMQNZHY78:X0Nw80Ptip0VXEAtaltnzfILmzMbw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
226be67cc237922b0c7bfc36b7ff5373

Files

226be67cc237922b0c7bfc36b7ff5373
.dll windows:4 windows x86 arch:x86

03a4e6b9889e8959520ea5c13595e1bb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

GetMessageA

advapi32

OpenServiceA

ole32

CoInitialize

Sections

.text
Size: 18KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sos
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE