22621d0e28575bbcf52faac3e4932f5a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22621d0e28575bbcf52faac3e4932f5a
Size

63KB
MD5

22621d0e28575bbcf52faac3e4932f5a
SHA1

abf26ab31da44516bd510a16a289e3c308ebd4b6
SHA256

41f88ef58a4f3ef93d060c34e7569c5b58ff10a0d1e71b6e7c16d2c766a3f5e1
SHA512

fce4c5fbb64eb9fc3dd939abd1f7f59a0b7e0317cf4c8af59beb20d676994852c9d862c10286fbc660917c9f0fa3580697c5041006f18d9f3e458fded1f38915
SSDEEP

1536:0Guf4LN3qAcL8HgBNX77k260Pz8oC5sTKRZS2logas:kALN3qAs8HP1y+STKh9H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22621d0e28575bbcf52faac3e4932f5a

Files

22621d0e28575bbcf52faac3e4932f5a
.exe windows:4 windows x86 arch:x86

842309f5d86c3408518624c1406e746a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetHandleInformation
CompareStringW
GlobalSize
PeekNamedPipe
ProcessIdToSessionId
GetEnvironmentStringsW
ClearCommError
FlushInstructionCache
GetNumberFormatA
SetConsoleMenuClose
LZInit

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE