222c86b265c9ed3b3748f3b3905aac6a | Triage

Sharing

General

Target

222c86b265c9ed3b3748f3b3905aac6a
Size

2.7MB
MD5

222c86b265c9ed3b3748f3b3905aac6a
SHA1

b7e4e97c0936a389639a662babb4a6868c0f9c4f
SHA256

22ecaa704e14df6f8dcba45ae33f41b66d72a90acc2c9f4783aaba7bb371d88c
SHA512

8c186e543bcbc93761ed59a353a2a34102b8b787cdeaaab18d5156660c87a5a535654d462c62b614ccf3d65f2618bf72fbbc2348d6c9105b696afd73ca91da6e
SSDEEP

49152:GNwsUD+QHpPTMTo6BwV5KADE74qj5al7UyMayytcYL0knho6BZ5guys8D7vWoOSB:3sUDfwJBwVkWEMm4Dnnho6z5jyz3+lSB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/setup.exe

Files

222c86b265c9ed3b3748f3b3905aac6a
.zip
nfo
readme.txt
setup.exe
.exe windows:4 windows x86 arch:x86

1e811d895699b6931856ba29571231ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAlloc
GlobalFree
CreateFileA
GetFileSize
SetFilePointer
ReadFile
CloseHandle
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
GetThreadContext
SetThreadContext
Process32First
GetCurrentThread
Process32Next
CreateToolhelp32Snapshot

Sections

.text
Size: 502KB - Virtual size: 502KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ