019D7E392CFFCF6D7588AFDD1117FEA3[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

019D7E392CFFCF6D7588AFDD1117FEA3.exe
Size

1.8MB
MD5

019d7e392cffcf6d7588afdd1117fea3
SHA1

7ff8859f3bd98a992a1e86aa7d2af4be0987e6c0
SHA256

03703f10affba6ce59c0a3821405aa5b09b71fa20bfeef2d811e0109f63ef5e6
SHA512

f65f9ad0ade719b67d7cec62b47a2fb8a1792c704e596592d40f55ca8c215886810a231dee6cee9c059ee02dc79c89d8349bbf656a284712cdc1bdece7e988c3
SSDEEP

49152:59TgAZhLI6PFLy5Iy3uIDs/4XBvtMhvnWXDk7lSG/luw8ejNixHg:5KA3MiFLM5BBvtMhvnWXDk7lSG/luw8t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
019D7E392CFFCF6D7588AFDD1117FEA3.exe

Files

019D7E392CFFCF6D7588AFDD1117FEA3.exe
.exe windows x86

2fa5aeab320c9ab9c8a267fc1de71206

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetStdHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
GetVersionExA
MultiByteToWideChar
SetFilePointer
GetLastError
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
LCMapStringW
SetHandleCount
GetModuleFileNameA
CreateThread
CreateProcessA
WaitForSingleObject
GetModuleHandleA
OpenMutexA
CloseHandle
GetSystemDirectoryA
CreateMutexA
ReleaseMutex
GetStringTypeW
GetStringTypeA
GetStdHandle
UnhandledExceptionFilter
FlushFileBuffers
WideCharToMultiByte
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
HeapAlloc
TerminateProcess
ExitProcess
FreeEnvironmentStringsA
LCMapStringA
GetCurrentProcess
GetVersion
HeapFree
GetStartupInfoA
GetCommandLineA

user32

GetDesktopWindow
SetWindowPos
UpdateWindow
ShowWindow
TranslateMessage
DispatchMessageA
GetMessageA
SetWindowLongA
MessageBoxA
RedrawWindow
GetWindowLongA
LoadBitmapA
PostQuitMessage
GetWindowRect
DefWindowProcA
BeginPaint
EndPaint
RegisterClassA
LoadIconA
LoadCursorA
CreateWindowExA

gdi32

GetObjectA
CreateCompatibleDC
SelectObject
BitBlt
StretchBlt
DeleteDC
DeleteObject
GetStockObject

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

ShellExecuteA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

VariantInit
VariantClear

shlwapi

PathFileExistsA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2fa5aeab320c9ab9c8a267fc1de71206

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

version

Sections

.text Size: 28KB - Virtual size: 26KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 12KB - Virtual size: 17KB

.rsrc Size: 1.7MB - Virtual size: 1.7MB

.text
Size: 28KB - Virtual size: 26KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 12KB - Virtual size: 17KB

.rsrc
Size: 1.7MB - Virtual size: 1.7MB