22f3e4a1d074aec6cbc7314efd0f53e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22f3e4a1d074aec6cbc7314efd0f53e0.exe
Size

966KB
MD5

22f3e4a1d074aec6cbc7314efd0f53e0
SHA1

169c6970364d5f8b75efe451a38d7a91b1b47f6b
SHA256

2d6eb4f35570a71972008b6f1e3572aaab6d0ef97e19c42dbc68aeb57b670964
SHA512

81038105db28db336e2446d4210e76dbcc578640cfe72e24e85355518a3eb23498c99a9a15a311e4e2ba31cd5a69f1db0d0d723e255139a98821aaa73b8b7907
SSDEEP

24576:6bkynDESWY4vQ+P3zR+L1CMCowXu/3mmo3AMF9wfHrh:6I8DE/7vPcL1HCowX8mmo3A9jh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22f3e4a1d074aec6cbc7314efd0f53e0.exe

Files

22f3e4a1d074aec6cbc7314efd0f53e0.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

fTTh.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 940KB - Virtual size: 940KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ