22e4e26569c776c4f912a6486601b7de25309768ddfbe97346913ad66085bacc | Triage

Sharing

General

Target

22e4e26569c776c4f912a6486601b7de25309768ddfbe97346913ad66085bacc
Size

63KB
MD5

98820e5ee186a94fb349e603585b111a
SHA1

dafb8aa00472609ffabc9c1a804d27d83c6b1bb8
SHA256

22e4e26569c776c4f912a6486601b7de25309768ddfbe97346913ad66085bacc
SHA512

56bdaa9b72dc130834cebe4bed22c8de8d55350234d29275f7ed3f787ac78807dd3fe51fd6b6bfdb2adef167cb1484a575c094587f2bacc04a2d268492cc2747
SSDEEP

1536:9gzHj7UlONV0zp3Gea3sz4HVOOLWE9YFxItijiwa5DA4Lr:9CfUlOkGi8OfE9o+tkiwIxLr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22e4e26569c776c4f912a6486601b7de25309768ddfbe97346913ad66085bacc

Files

22e4e26569c776c4f912a6486601b7de25309768ddfbe97346913ad66085bacc
.exe windows:4 windows x86 arch:x86

c6a9c5d477d58f3af10a5b6517b86da2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TermsrvSyncUserIniFileExt
SystemTimeToTzSpecificLocalTimeEx
ReplacePartitionUnit
ReadConsoleA
GetStringTypeA
AllocateUserPhysicalPages
CancelWaitableTimer
CreateFiber
BaseCleanupAppcompatCacheSupport

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE