22be18a20c4de2b77807f81f8481b1bc14c9823d24ccfd995ee0f7e760123c0a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22be18a20c4de2b77807f81f8481b1bc14c9823d24ccfd995ee0f7e760123c0a
Size

2.6MB
MD5

72995ed52d7ae031c096362999144f51
SHA1

72462df32c54645e69ff819d4c96d8cb64390e2a
SHA256

22be18a20c4de2b77807f81f8481b1bc14c9823d24ccfd995ee0f7e760123c0a
SHA512

253a125cb1651ecf991025b75b2473225c2bbc3640e3936f8ea7d1b17a930ab6f47a889c76db55a0bb38b963bb04b847645b82c908bad8ce7c3b1fe59c3e6021
SSDEEP

49152:xSoJdXN0BMOwLloBruge/4MnYYJ2ZhqSGLHkJEM0C+R2zNsnKvkTgXuquveY+W2p:x5JdXN0B7+sFIDQZ+RYNAKvkTgXuquvY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
22be18a20c4de2b77807f81f8481b1bc14c9823d24ccfd995ee0f7e760123c0a

Files

22be18a20c4de2b77807f81f8481b1bc14c9823d24ccfd995ee0f7e760123c0a
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\dbs\el\oc\target\x86\ship\postc2r\x-none\clview.pdb

Sections

.text
Size: 170KB - Virtual size: 170KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 280B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ