22d0fc53c3748b901a30b616867171a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22d0fc53c3748b901a30b616867171a6
Size

50KB
MD5

22d0fc53c3748b901a30b616867171a6
SHA1

ebc5d2aba4307d867c47d24fb0f0104868801b97
SHA256

c070ddf28b57a39af7125f40f2b3987f8188461930513da612d944aa755367e2
SHA512

0e36e20c22cb5456f62102b7a671f0030b2db19a4f7f04dd02060a07d2312afc5b3459fee77c75eac3aa3fec0f446fbade3dccbc01e8c56b315698104231227c
SSDEEP

768:uikibfwXWMf54oe+8kqRCxwPRRyHayeQf6GSKlr6ig9UvI5+lBpoSQdTeQru6:lb+6oeRCXTe+U79UvIqGbrF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22d0fc53c3748b901a30b616867171a6

Files

22d0fc53c3748b901a30b616867171a6
.exe windows:5 windows x86 arch:x86

0fa199901b849ad39c197ea65cfd2525

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptReleaseContext

kernel32

HeapReAlloc

shlwapi

PathCombineW
PathFileExistsW
PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
StrCmpNIW
wnsprintfW
wvnsprintfA

user32

CloseDesktop
EndDialog
ExitWindowsEx
GetCursorPos
GetDlgItemTextA
GetMessageA
GetWindowLongA
GetWindowTextA
GetWindowThreadProcessId
LoadCursorA
PeekMessageA

Sections

.rut
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cvahmf
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bav
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ