22abff73839ae893a18a80e3a20a3c04 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22abff73839ae893a18a80e3a20a3c04
Size

225KB
MD5

22abff73839ae893a18a80e3a20a3c04
SHA1

8b17a94b5d8d3c0565dff6c0afa80d0914a1a955
SHA256

cffe403c7d67016db2f3a16bb264aee1ededbd4e784f4992c920e39f6d669f9f
SHA512

5fb87d1992e437e0992ae81b02ea249958dae00ce5d5ab963fff41121449e681e1db0a6689d24ddde2e18a734c5f213cb2bab0fa0a44a93c47e3aca7e02cdfa0
SSDEEP

6144:gygJVXiUTbrhdkbpthVTv258ZRDtq0dxENnuT:KqGbMf2q/Uf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22abff73839ae893a18a80e3a20a3c04

Files

22abff73839ae893a18a80e3a20a3c04
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

WSPStartup

Sections

CODE
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 31KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ