22b2e67cae73e4f92bc730627390eb6c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22b2e67cae73e4f92bc730627390eb6c
Size

56KB
MD5

22b2e67cae73e4f92bc730627390eb6c
SHA1

339e4c5e8601deb2c677bf8366ab02c39d179860
SHA256

51b5e5df23e6d9796b7ae013653d9d915da02db13b9e9ab22f90523e95a8dd30
SHA512

9fb14000e614c34630096161c7c36fbf91f8cb3d5df2d7922e8edc712ed838446c3f6016ce71047259d1c4b3413d08a2aeb5b3feb1c819702695ee1dde2e8fd2
SSDEEP

1536:mPUzcuTSJXFIhbeOYf5ezp9Zx0AukLePkT6QtxJfD1:m8jTo6Sf83/0ATLePg6G1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22b2e67cae73e4f92bc730627390eb6c

Files

22b2e67cae73e4f92bc730627390eb6c
.exe windows:4 windows x86 arch:x86

2b06823d82ffef4e04fb01cc9581397d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateConsoleScreenBuffer
GlobalUnWire
GetNumaProcessorMap
SetComputerNameExA
GetNextVDMCommand
GetConsoleKeyboardLayoutNameA
lstrcpyn
DebugActiveProcess
ReadFileScatter
SetFirmwareEnvironmentVariableA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE