22ac0fa8411aebf2d1feadad9c6057f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22ac0fa8411aebf2d1feadad9c6057f2
Size

51KB
MD5

22ac0fa8411aebf2d1feadad9c6057f2
SHA1

3d4d20f6229c38a362443e29fd4a828bab339da8
SHA256

24bce1628201b718217180ca23e64588b9c2fe32289d11d0571379d09f704ccf
SHA512

b2b4dfed6e371e62a44985f745f1f9afbb8cb5ad79f9bf78a9a295833a5f1824d66d816bb88fdbc51babe8391ac673a24621272d27d620e4b6d2868fb85cb6fd
SSDEEP

384:/Ez0e11F1YHgx4x0EgDEoGlZWcLF+5Ul3UHnHd+:/SF4RxuDEzZLCUGHd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22ac0fa8411aebf2d1feadad9c6057f2

Files

22ac0fa8411aebf2d1feadad9c6057f2
.exe windows:4 windows x86 arch:x86

d1de9cb05364462a2d510f7f8254cac2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mpegsys

ord46
ord32
ord38
ord40
ord39
ord41
ord31

kernel32

ord364
ord305
ord813
ord638
ord710
ord553
ord419
ord329
ord476
ord513
ord385
ord160
ord822
ord248
ord765
ord346
ord657
ord784
ord395
ord304
ord362
ord719
ord185
ord811
ord318
ord312
ord406
ord722
ord377
ord443
ord441
ord512
ord511
ord795
ord509
ord793
ord736
ord296

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 462B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 25KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE