22f359d9627c93e6dcf5411ad2180b73 | Triage

Sharing

General

Target

22f359d9627c93e6dcf5411ad2180b73
Size

523KB
MD5

22f359d9627c93e6dcf5411ad2180b73
SHA1

577145e8513b6ca34a9796e0d7e8ce9467b9df78
SHA256

5d7f00e5216d7d51626ec9dc8528f0057a312f84f6bba861e6071994d017c409
SHA512

3e1389ccee20540b75fb48f91b473222b11253a4ce40743d26207ba402bed5ee51d607c0e90ebd9184829cc6c649cbd0c5e9158f633c6d1ec7f5079d145b744a
SSDEEP

384:VyVlNjtU2ew6W9pfo/06ZNVdU/U5MFSxW5wG5zQqKkpLyd6d0:IVlyW7L6jVdWSAwGdQqKkKT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22f359d9627c93e6dcf5411ad2180b73

Files

22f359d9627c93e6dcf5411ad2180b73
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

EnCHookCWindow
ge4gdcfsd1
ge4gdcfsd2
ge4gdcfsd3
ge4gdcfsd4
ge4gdcfsd5

Sections

CODE
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 179B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ