22f76cf4a79c48f6f8e29741579909ef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22f76cf4a79c48f6f8e29741579909ef
Size

104KB
MD5

22f76cf4a79c48f6f8e29741579909ef
SHA1

4858627ba7076b197236e2f2000f7cb8397defa5
SHA256

6a6096869e873057ee6990d3b7230539c774a45caf8a8f7489942e1b07b53502
SHA512

a13b45ca67d722083eec243af7b7eeab90df6943e9460cf46f507ea2a8747d7390e5da65599bfd236405e753af94b571fa57d046e63e96488f1d868a8f206b5d
SSDEEP

3072:JB+L5w5kC6xTutuK87ZwnaVzk8jwaaHw7Koj4rJ:X5SUtgZwaQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22f76cf4a79c48f6f8e29741579909ef

Files

22f76cf4a79c48f6f8e29741579909ef
.exe windows:65535 windows x86 arch:x86

10fe20451a72627901434cf8b56b8333

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CreateFileA
VirtualProtect
GlobalAlloc
VirtualAlloc
GetTimeFormatA

msvcrt

__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_except_handler3
_initterm

Sections

.text
Size: 60KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsr1
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE