22f1786df6d9ed0b2c8d59c184c1fc81 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22f1786df6d9ed0b2c8d59c184c1fc81
Size

83KB
MD5

22f1786df6d9ed0b2c8d59c184c1fc81
SHA1

853354a8e3d4eb36e3b3f8f023a824d2824475b9
SHA256

494c71aa1c5f8f41ff6eeeb92ed48c2580e60c5a5bd4675d8e77fe28672576d9
SHA512

eb6ba011a99a9680df5f13dc8a8e8df36911b4fd1c3c1433d6d2fdd516d1c17239795be07d3af0834c565bccbc2f3aff86e13665c83246d68b2ec482c97538f3
SSDEEP

1536:repO8KbFyTtR5MOmoY70XzP05TPHE/r7IBa4pjVrs2ryrd1vUQuq:QLQ8tR5MOFY70Xzc5rHO7IB/Hs2q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22f1786df6d9ed0b2c8d59c184c1fc81

Files

22f1786df6d9ed0b2c8d59c184c1fc81
.exe windows:4 windows x86 arch:x86

1e198d9b99fccf07cfcf34ce3ba5093c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadCodePtr
WaitForMultipleObjects
UnmapViewOfFile
GetFileAttributesExW
SetSystemTime
TrimVirtualBuffer
BackupRead
DeviceIoControl
SetUnhandledExceptionFilter
TerminateJobObject
CloseHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE