22ef343ba2404c002e45937e3487509d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22ef343ba2404c002e45937e3487509d
Size

152KB
MD5

22ef343ba2404c002e45937e3487509d
SHA1

a7f55c8872d3cfaad6fd9f85397454dff10e0e60
SHA256

c461ed079f4cc04ca077359b4feb889e7a8dca0cbd5b1ba8be8ff310fe43fe43
SHA512

4ec70331f98ce3ddf7501c902e160b29c09f1a438d7baec8979461d760ad5dd0b1e3aecbc4d18b9e709aca1b0bb41418cc0d0e4e457d0099ead56791a08c87c0
SSDEEP

3072:fRD2HEyawm/94iC7KmJp/1WmUDWQFnivfB4YV9AoE:fR1bFC7KmHkmUDWGmJlLY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22ef343ba2404c002e45937e3487509d

Files

22ef343ba2404c002e45937e3487509d
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

kjmhx89c
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zjs1rfz
Size: 150KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

q48sd3b6
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ