622e2a97e2ffafaa49756201d6d92c8cfb2c028dd7d04e7972a32e4b3e7e3151N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

622e2a97e2ffafaa49756201d6d92c8cfb2c028dd7d04e7972a32e4b3e7e3151N
Size

22KB
MD5

4b6f94dd000f17b4fcf4452d911e3d40
SHA1

bd9d3db50328afe82e9619c954c0f9a8bef3b0f0
SHA256

622e2a97e2ffafaa49756201d6d92c8cfb2c028dd7d04e7972a32e4b3e7e3151
SHA512

46a524376bd83bdb410c59d9406db3ef344754e43bb627776c70baad8bd1e403ed9c847e2b841212bd4bc2ba50c0eeb6a8f3e59e3f30567a1d97c5db8504bf71
SSDEEP

192:itxkDDYd9X9lr51ZaYHULSdSfiCetbpE1eEE1RsocnavkFqKTYcB57zQQQvDT+WN:gxNlDZnUShCkFIZocXLnB5n8/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
622e2a97e2ffafaa49756201d6d92c8cfb2c028dd7d04e7972a32e4b3e7e3151N

Files

622e2a97e2ffafaa49756201d6d92c8cfb2c028dd7d04e7972a32e4b3e7e3151N
.exe windows:4 windows x86 arch:x86

73f03e1b671aa0bd1520dce7446a8a13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
ShowWindow
PostQuitMessage
GetMessageA
GetClientRect
DispatchMessageA
CreateWindowExA
RegisterClassExA
DefWindowProcA
SendMessageA

kernel32

HeapAlloc
GetStartupInfoA
GetModuleFileNameA
GetCurrentThreadId
CloseHandle
GetModuleHandleA
LoadLibraryA
lstrcpyA
GetProcessHeap

comdlg32

GetSaveFileNameA
GetFileTitleA

comctl32

ImageList_Add
ord17
ImageList_Create
ImageList_Destroy
ImageList_AddMasked

ole32

OleFlushClipboard
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
CoTaskMemFree
CoTaskMemAlloc

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ