622bbe52259c5e0cc55f5dc57714bbad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

622bbe52259c5e0cc55f5dc57714bbad
Size

20KB
MD5

622bbe52259c5e0cc55f5dc57714bbad
SHA1

e1300d8e29feb716b9a94689a55e1470732453d6
SHA256

cb8a4d3bed604bbe8388db63dbcfdd2e35857c733c1c008a06127d2f19381137
SHA512

09a855e07b17c3711521bb60a7d5ca4f3a540b8545286cda05c87f0477543d2a3c0c6610ea2e132c40d25a49ddbba91fab8d2d2d07fa3894c0a2cb6b0e267cb2
SSDEEP

384:NVTRKnYEfMEwvPRp5sfxhtkdb3S3zpsG17tWq9bS+TVUm:vRKYEkm1kapR62JVUm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
622bbe52259c5e0cc55f5dc57714bbad

Files

622bbe52259c5e0cc55f5dc57714bbad
.exe windows:4 windows x86 arch:x86

58708828d5c31968bd59859804ecde67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetLastError
CreateMutexA
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ