22e4feca8bd7f06afbb0415f7eca40fd7b50c3f052174b08e67b65e8a07d5515 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22e4feca8bd7f06afbb0415f7eca40fd7b50c3f052174b08e67b65e8a07d5515
Size

708KB
MD5

153bfcfaea278435ab61588cf13d8330
SHA1

58032ca4eeb8c632472155c30305996312c55ade
SHA256

22e4feca8bd7f06afbb0415f7eca40fd7b50c3f052174b08e67b65e8a07d5515
SHA512

62bc4a83e689f31894a15f750f1c5d975855995a158ba2a6e09ad6aaf0e96e68f7bfc94bf50f9df31e9ba3c3aea77129a793c202ba936a3dd36f391f50b99b68
SSDEEP

12288:Y/SLDGsJU5bVrv+xnjAA57uqStnvpeStvrDxC5KJ/tTIyfTbBQtTQvmTRl:w0DlJUbVkn9VunnvpeStvfwEJ/tTIcFm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22e4feca8bd7f06afbb0415f7eca40fd7b50c3f052174b08e67b65e8a07d5515

Files

22e4feca8bd7f06afbb0415f7eca40fd7b50c3f052174b08e67b65e8a07d5515
.exe windows:4 windows x86 arch:x86

f03f3bf5880f7a58a2fba4f3377d498f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoTaskMemAlloc

comctl32

ImageList_SetIconSize

winspool.drv

OpenPrinterA

Sections

pec1
Size: 672KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE