22757183f3ede648ac83b30439ee0c0c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22757183f3ede648ac83b30439ee0c0c
Size

94KB
MD5

22757183f3ede648ac83b30439ee0c0c
SHA1

c215a479be17bcf98abb21cea9763bb505446001
SHA256

e27db70e1335911c0b5abc56e98c83b61d39eff6de270753a46d5f723afc6794
SHA512

b4a1a10485c3a3fc5e831fe38721f83b6e4a1cd5ca124336247b6012f61ffb77ca54e9bbc7cd4066f423b927364a33100130e85ac44bdaa8d6f1c9b9f7fa12df
SSDEEP

1536:thgEXYjEoWNeasUOVHRmoFUtO8blz0nPwhY3jaqGns9rjm:U0YjEoWNeUOVxBUtO2l0nPwhY3jVG3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22757183f3ede648ac83b30439ee0c0c

Files

22757183f3ede648ac83b30439ee0c0c
.dll windows:4 windows x86 arch:x86

4ae8cce1cdb668a8fad907517a62efc7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
ReplaceFileA
Beep

Exports

Exports

sqontsj

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 446B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ