22f9413cc1c2347b722f1be981bb29e6a58f0d395b90a62911f00fcec471b65b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22f9413cc1c2347b722f1be981bb29e6a58f0d395b90a62911f00fcec471b65b
Size

119KB
MD5

c9c140764ffac60935bcbb6f44c4f93b
SHA1

e1b8084776ce3547b3854777429e3b2225e52abe
SHA256

22f9413cc1c2347b722f1be981bb29e6a58f0d395b90a62911f00fcec471b65b
SHA512

5fa50dec0631773ea152ecc084b2f87bfb64fad86f4d1c6fed033db27a3db9da1aaf3f184fbcf1c837eaa3500673eb246da65e11b7a7dcdf74a33e74023fab01
SSDEEP

3072:8PpAKqaslkRTnST64pJ9MTEHQIOq+6dUzcZhh3A:8CTlvrb9M4HQION6qcZE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22f9413cc1c2347b722f1be981bb29e6a58f0d395b90a62911f00fcec471b65b

Files

22f9413cc1c2347b722f1be981bb29e6a58f0d395b90a62911f00fcec471b65b
.exe windows:4 windows x86 arch:x86

d03039ff971234ee1fec1e88da721e5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadCodePtr
RegUnLoadKeyW
GetConsoleProcessList
GetComputerNameExA
lstrcpyn
CheckElevationEnabled
GetConsoleCursorInfo
GetThreadLocale
GetAppContainerNamedObjectPath
RtlCaptureStackBackTrace

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE