2022a30ae69ee9dc2bc6c0f33a56c8e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2022a30ae69ee9dc2bc6c0f33a56c8e8
Size

50KB
MD5

2022a30ae69ee9dc2bc6c0f33a56c8e8
SHA1

0914a179dad8fa94a9fd94bdc3c65ec79b84c3ed
SHA256

ed63e76c18795a04b11e6985a744c6ded7bf74ca55b641ff67c25eaa4c46775d
SHA512

3350c75ca4c8af64f9250d38a8313f7a0d3cf8e527dd0f748aa57e4b727ed6c57ff70e60ccc61b24469ab1e4b007c68a295b1cdef855f3574b6f9a26c53ffd3f
SSDEEP

384:aB//6lMm/XPYBlsbChu4o4JyFlryHzYwMMs5QQ/5XoAz2//zBz/oFy1OwByqgdNa:8//frsGilTDz2/bFNMqWNU+KD4FV2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2022a30ae69ee9dc2bc6c0f33a56c8e8

Files

2022a30ae69ee9dc2bc6c0f33a56c8e8
.exe windows:4 windows x86 arch:x86

3dae4d136c2dccaf3a853f191699379e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

_fstat
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
exit
fclose
fflush
fopen
fprintf
fread
free
malloc
memcmp
memcpy
memset
setbuf
signal
sprintf
strcpy
strlen

user32

GetForegroundWindow
GetWindowLongA

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE