22aa249c5c91b6c8fb9a7d0ef2c85f78 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22aa249c5c91b6c8fb9a7d0ef2c85f78
Size

57KB
MD5

22aa249c5c91b6c8fb9a7d0ef2c85f78
SHA1

d42bc3c2a878f38619bf64b61e8e14cf8cb0d481
SHA256

e74d71c2325f182d149f6981b4fbcc7128a918440f3e95cf71fd932bcf99cef9
SHA512

e2dfec242b2076f1c02387c7824b9a49f1bc6e01ad0d99ff5c24f27a05a7f84bc4822e8c027d2ce928c7bfb278410510bb09caa3c279d42143903c3a5d7dbdc8
SSDEEP

768:uF/nuCL7AbULtrER2tmHD2LIbRj6deT4mG03BuQRLlDCLz1+QsNhh:onuecbURoRzD2cGekmTllDS+Rh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22aa249c5c91b6c8fb9a7d0ef2c85f78

Files

22aa249c5c91b6c8fb9a7d0ef2c85f78
.dll windows:4 windows x86 arch:x86

f45c7b3c4b95454fb84eda37ae82256c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Beep
HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
ReadFile
CreateFileA
GetModuleFileNameA
MoveFileWithProgressA
FillConsoleOutputCharacterA
CreateTapePartition

Exports

Exports

sitkreyv

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 582B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ