b19d502263adcc8f0360b8ee295e473f5baddb8dc6deed4df9ad6e6cdbb4951c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b19d502263adcc8f0360b8ee295e473f5baddb8dc6deed4df9ad6e6cdbb4951c
Size

516KB
MD5

11e246c000d88463fa202f3701b59865
SHA1

7935ae7f2c8f45715908606326bc966ee9c7a07a
SHA256

b19d502263adcc8f0360b8ee295e473f5baddb8dc6deed4df9ad6e6cdbb4951c
SHA512

b0b352df613f3e6286c6fb61a1c4264967c5cb1e601e14767f561cbe2c92097f3fab2f9042fd6559721cdf86a3651bfd9b44cb4c398e5af4f626f89ca9f183e1
SSDEEP

12288:T9uBEZygLuGz+C/0EwYa2DlK5F9O2o79:T9ogLuJC/0ZYa2DkTQ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b19d502263adcc8f0360b8ee295e473f5baddb8dc6deed4df9ad6e6cdbb4951c

Files

b19d502263adcc8f0360b8ee295e473f5baddb8dc6deed4df9ad6e6cdbb4951c
.exe windows x86

0c518958b7874c172a92aa695c7476de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

EnableMenuItem

gdi32

LineTo

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA

advapi32

GetFileSecurityA

shell32

DragFinish

shlwapi

PathStripToRootA

ole32

OleDestroyMenuDescriptor

oleaut32

VariantTimeToSystemTime

version

GetFileVersionInfoA

Sections

.text
Size: 476KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE