22a559a100a7274f8ef03f26714c592f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22a559a100a7274f8ef03f26714c592f
Size

104KB
MD5

22a559a100a7274f8ef03f26714c592f
SHA1

ef4ebe8e5001dd3b4fa0c8b6592cabddf6190d02
SHA256

3cc00606ae4f41750cfb8435c8aa90d972a210f2aea1c7c39b42a69098557c40
SHA512

cad0bcb2bb8be02827b8dbe72531777e384bd6ceaec0d0f0b5ad2a4765474a6dccde8b8f1d4788b88faf3a69705326c330cc0672afa1fb7a870a479c392fe686
SSDEEP

1536:zyYwaidORWQ+/dKYcnrViRZce53Jq9LwySs5PN4QVMW94MFsE8ftwftyH5g:j+ePxYcnrViRKQU5V2MFktw1K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22a559a100a7274f8ef03f26714c592f

Files

22a559a100a7274f8ef03f26714c592f
.exe windows:4 windows x86 arch:x86

6f890fd251de5970e09f298d83a737f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

GetUrlCacheEntryInfoA
FtpCreateDirectoryW
GopherGetAttributeA
IncrementUrlCacheHeaderData
InternetCombineUrlA
FtpGetFileA

urlmon

DllGetClassObject
CoInternetCreateSecurityManager
HlinkGoForward
URLOpenPullStreamW
BindAsyncMoniker
URLOpenStreamA

user32

CopyRect
CallMsgFilterA
AdjustWindowRect
CreateIcon

Sections

.text
Size: 41KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE