219712-E68595E8AFBEE7BD91[.]exe | Triage

Sharing

General

Target

219712-E68595E8AFBEE7BD91.exe
Size

1.6MB
MD5

31ad360b106bdc1e2e55073f1412fac4
SHA1

a67c373f3f6a4c03e2e018c3ae5065e8f8a041d9
SHA256

25914a593caf810eb419371a0510b45ada39a19f34c3a2e96cfc87e4df555375
SHA512

e8d1c21c7211c07effccf3bf5ef5afb6906b1b2aafdf68f9c7a9252c0a57d509c37d4a30381de2abf53e1ed4c0bde56ba693f548096b26f8bd2c5147afdca8a1
SSDEEP

24576:6rQGk6KfUzTqMOOI+2o4mC8ZLbJbRGMBz+YPKsmt1GbB7Pv:6lZT5I+u8ZfRRGOKYSTObB7Pv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
219712-E68595E8AFBEE7BD91.exe

Files

219712-E68595E8AFBEE7BD91.exe
.exe windows x86

84ececd5cc682d1bf48230cf9166baa6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32 kernel32

CreateRectRgnIndirect �b

Sections

.text
Size: 520KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 748KB - Virtual size: 748KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 388KB - Virtual size: 388KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ