22cbe9bf59f7f030e1b9d1956a8d122b41133ee73e4e17c750928a330f221790 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22cbe9bf59f7f030e1b9d1956a8d122b41133ee73e4e17c750928a330f221790
Size

12.9MB
MD5

9a730c3feec620d533a01b76f191f391
SHA1

8997eb6bde6e0f78d5243c6ecdf2e58798825bae
SHA256

22cbe9bf59f7f030e1b9d1956a8d122b41133ee73e4e17c750928a330f221790
SHA512

b1722aeac82c662d5a2023adba7597ea1b381e6acc5a7acc081e86a8132f34fcf3e090a8b2bfced87a35ad8cdb0262a5287be73432ec0024d7e965f8953391c0
SSDEEP

196608:srbcQWb8flBdmjk3Hpwi+NXr6FIPha0ejJswUUSPlwnDviL42BOkn5ZyWln/:sYb8HdWk3HSrDA0oOUWlwnDvMEcZyE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22cbe9bf59f7f030e1b9d1956a8d122b41133ee73e4e17c750928a330f221790

Files

22cbe9bf59f7f030e1b9d1956a8d122b41133ee73e4e17c750928a330f221790
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 2.7MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.detour
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma1
Size: 9.1MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 284KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE