22589411f048e6e8d6c3c3801e6ce5a0N[.]exe | Triage

Sharing

General

Target

22589411f048e6e8d6c3c3801e6ce5a0N.exe
Size

184KB
MD5

22589411f048e6e8d6c3c3801e6ce5a0
SHA1

b04688143d37150d85ebef9736062d3aaebb98b0
SHA256

a96ec3ed0a19ef500472cbced5fa14ce875c19aba8ca8bf3041f229c551e6756
SHA512

6977b516b44993b66e2a03c0ed9f63600815906ea7dd96b07128314b2180456a8fc66a235da1ae723f5384510210d0a107604d17a9f23ead06a0b8ad939a8fd7
SSDEEP

3072:sgkQz1PuOprc+kq6VNOe3qbarVEpZlcbBacS9nOdgedA4l:5PFkq6zOe5ilSanOhd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22589411f048e6e8d6c3c3801e6ce5a0N.exe

Files

22589411f048e6e8d6c3c3801e6ce5a0N.exe
.dll windows:5 windows x86 arch:x86

4a4882bc1b5b7458d9aba22e8f9b9b31

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

RegOverridePredefKey
RegisterEventSourceW

gdi32

GetFontData

msvcrt

memset

user32

ShowOwnedPopups

oleaut32

VarBstrFromDec

kernel32

GetModuleHandleW
LoadLibraryExA
GetModuleFileNameA

Exports

Exports

FWroeeWqoinnmw

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ