022686242e43625ed0d01d3bfa24bc9e | Triage

Sharing

General

Target

022686242e43625ed0d01d3bfa24bc9e
Size

56KB
MD5

022686242e43625ed0d01d3bfa24bc9e
SHA1

8dc90a9e912c144308845a934cf753d817f07c44
SHA256

5a0a73c7fb520389ca3f226ec9a42fd0bcee621eb50f47ac905f31b0b34a1c32
SHA512

4678064a1f309038b8b3ad59955c2e211dcbfd79546dde2c1bb7035d130cba06ba20611706f732b9fd2243c383848f48340a8836dcb139ade051733deb900092
SSDEEP

768:bOHBUhwUt7cJTEuhVsAFuxLzHZvlrjQITbNtmHAPLjsE/lraH7VbnbO/knHInZGb:Zq4hmIfNt8WaH7VGnZXx5BtXmf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
022686242e43625ed0d01d3bfa24bc9e

Files

022686242e43625ed0d01d3bfa24bc9e
.exe windows:4 windows x86 arch:x86

9121b6f38e58dbf3b13e72e32dfd88f8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetWriteWatch
ConnectNamedPipe
GetThreadContext
VirtualFreeEx
GlobalAddAtomW
WriteFileGather
TzSpecificLocalTimeToSystemTime
GetACP
DosPathToSessionPathW
GetExpandedNameA
GetCalendarInfoA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE