0622134455550b7bcb8147b00ad3cf14 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0622134455550b7bcb8147b00ad3cf14
Size

21KB
MD5

0622134455550b7bcb8147b00ad3cf14
SHA1

37fc38279d84bb1242cef86f1d698ead4e073e02
SHA256

f395225c901737a3317b4d7491d0ae6827345a3e14d5c13091e78d409e365040
SHA512

bada8dac2a632dae883441cfc84d40210e6f29f8e28e4a5d0e3792e0bcc6d1f65b372138ef78e361bcdd2ff102c89386c0ac4f91ea75784eb25213d7f12ef248
SSDEEP

384:rQYlcI6wEg7UmgzCA02/mUHMDY90ZIxr7We8n5EoMvSEOeWUf2HKuZQpFKR7:cCc/8ULCA06mUHZ0ZIl7WeIMvSEdf2qS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0622134455550b7bcb8147b00ad3cf14

Files

0622134455550b7bcb8147b00ad3cf14
.exe windows:4 windows x86 arch:x86

cfef96b75fe69f5dc87defabe0e5217b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CancelDeviceWakeupRequest
GetNumaNodeProcessorMask
BaseCleanupAppcompatCache
GetConsoleKeyboardLayoutNameA
Process32Next
PulseEvent
SetCriticalSectionSpinCount
SetConsoleTitleA
DuplicateHandle
IsDBCSLeadByteEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE