224e1246b28f0896067877fa4081f4c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

224e1246b28f0896067877fa4081f4c5
Size

58KB
MD5

224e1246b28f0896067877fa4081f4c5
SHA1

3dd8c87982bc34469676dce4020df869658059cc
SHA256

0f2f0edf33e8ed4aafbba95a76e367d79c10fc67bd474efa1ecfb74d154b548d
SHA512

bca85a0a5f3dd2c3046ccd8db775ef614d5a30d67540d569c45f612d6bf474c9bd1f6d35dd58bec581ad1805529df7638c151553d9f5c50854f08730281b0701
SSDEEP

768:UjMKhW34DyhU+GRwnOEAZLCyZkL1/0KhL21WxdS+AQkzxq8rx5P/7mg9W2:4hya+GRzEAphCl0+s2YTxqEx5P/SIW2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
224e1246b28f0896067877fa4081f4c5

Files

224e1246b28f0896067877fa4081f4c5
.exe windows:4 windows x86 arch:x86

cfef8918eb06fe9cd292b786655a4658

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

Sections

CODE
Size: 37KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE