22acb2c96a85f99b05f0402cec1c6deb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22acb2c96a85f99b05f0402cec1c6deb
Size

990KB
MD5

22acb2c96a85f99b05f0402cec1c6deb
SHA1

18a549459ac50e911edcb76850f1cd71dd9f9013
SHA256

cb7ff1bc37d408f4967e7036dd99ed91185ce9a71563ab6c6445eda34bea631e
SHA512

2abebd477e9a62a6c14ce323b38f36a1669b9f42d7b6ff246d56d70fd07ec48bd6d26bcd0b74acbf2ab2fe9145ab1b27014ddc113a855d971ede6357f324249c
SSDEEP

24576:Q+kjpAUOy8LsgAIbu0YGJ5diXLlNwSzpKsatHu:yjSUOEeJvXgTwu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22acb2c96a85f99b05f0402cec1c6deb

Files

22acb2c96a85f99b05f0402cec1c6deb
.exe windows:4 windows x86 arch:x86

e2a38d9ad3409a50dc844fb8deec2bb8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysAllocString
VarI1FromI2

kernel32

GetModuleHandleA
GetStartupInfoA
GetCurrentProcess
MultiByteToWideChar
InterlockedIncrement
ExitProcess
TerminateProcess

Sections

.text
Size: 839KB - Virtual size: 838KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 138KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.version
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ