9922e06508ca2d1c76377810e3792466 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9922e06508ca2d1c76377810e3792466
Size

12KB
MD5

9922e06508ca2d1c76377810e3792466
SHA1

28b18afaff3922d055d590f39755c9e1b95d814e
SHA256

6b99e692a5c7f45e4dddc82ad937ef199b63510c1fab9fabed81c11b9169a6d0
SHA512

c26a26462b568845a5ee05767de4c0997226ccf6b6fa1763962916348ead6e85a0d813ff639f51fdc88eb08ba9d1a4aa34478d0b7a822b22200841f4984a990a
SSDEEP

192:1tn+ser4I4GORS5Jh0XwBCm+KSypJK73DluiFkPyj:1tveoGHh0AFlSypsTluykPyj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9922e06508ca2d1c76377810e3792466

Files

9922e06508ca2d1c76377810e3792466
.exe windows:1 windows x86 arch:x86

52e7140f06d4b0e9780377fa1a230b70

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
IsBadCodePtr
GetCurrentThread
CloseHandle

Sections

.text
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE