22fec112920e578146002737dbdb382dae9888ca3eba519bc188d625fb85faf3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22fec112920e578146002737dbdb382dae9888ca3eba519bc188d625fb85faf3
Size

76KB
MD5

ef2b82e0c5d6a2faaa5377ce2384f04e
SHA1

8ead1c5aa945858fab1aa60bc0c7fb8fe004b04a
SHA256

22fec112920e578146002737dbdb382dae9888ca3eba519bc188d625fb85faf3
SHA512

bb0d1f720cb75881ebd9d63aa79c8ed9757f08d2d75f02b3d312b88abbd6da02d00cbc18455e4eb554216b469f544287e03a5beddc1c9d27de4ecd771e304591
SSDEEP

1536:yGQTiRLLHLhxXIZhgrvZoK9IE3MJer2GKUxNQOyIU0f4OfuZC1BRjxubnuGRySzb:OHMzeO4V0dt9uTHs2qo

Score

N/A

Malware Config

Signatures

Files

22fec112920e578146002737dbdb382dae9888ca3eba519bc188d625fb85faf3
.exe windows x86

0bf209c5237c999e9a977348ae4e1ae4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlMoveMemory
GetProfileIntW
MoveFileW
IsBadWritePtr
SleepEx
GetCurrentConsoleFont
FindFirstChangeNotificationA
SetConsolePalette
GetConsoleScreenBufferInfo
GetProcessAffinityMask
EnumSystemGeoID

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE