213457a4fed3f37c7b33e642c035ef22 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

213457a4fed3f37c7b33e642c035ef22
Size

56KB
MD5

213457a4fed3f37c7b33e642c035ef22
SHA1

17a0a8b463c97367dcb577664507bc1dc56cbd38
SHA256

6ba276adc444bcc73429091663f28351c80a86cc081cf6c3d0bce4cb655bc0d2
SHA512

704c817dbf0832d2852f3fddaea819fe03e16fda1d799ee20de1209dec8df17a7b34ad1916f3c4bf5e2db6c00a3b45d8239349e8142b832c9d844651b4895e6a
SSDEEP

1536:s7y6eP1Uc+qv60wyoxcbA+s1oeXsxevexhzHOXMPXPaA8BSm7HQIi:x6ioGE/6yexhH4E5l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
213457a4fed3f37c7b33e642c035ef22

Files

213457a4fed3f37c7b33e642c035ef22
.exe windows:4 windows x86 arch:x86

985fb04a533f4963c9117ff55a168a6f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterConsoleOS2
ReadConsoleInputW
SetDllDirectoryA
TransactNamedPipe
WriteConsoleOutputCharacterA
InterlockedExchangeAdd
CreateTimerQueueTimer
CreateTimerQueue
ProcessIdToSessionId
GetFirmwareEnvironmentVariableA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE