19d89a10a8db7219cf5e4e6370794749 | Triage

Sharing

General

Target

19d89a10a8db7219cf5e4e6370794749
Size

17KB
MD5

19d89a10a8db7219cf5e4e6370794749
SHA1

95ea8a4c86f41b0c05a76d5326045587d9a986ce
SHA256

2f0f514f4b572c1548daca1b063910049c49a3c15c1ca47d53a97352fa4576dd
SHA512

47f398710af0e421af9726cb5c91b98b79c54456925d62bbeda83affb0b17b62c9b407e1e41dbf0efbcc8243d835a9eec2ad32108e53708ffd09305043bee8ec
SSDEEP

384:MF/j9pYVcmZO2Zp+Nye8pqrmub8TyztsDN:MB/YVoKK8o8TyJc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19d89a10a8db7219cf5e4e6370794749

Files

19d89a10a8db7219cf5e4e6370794749
.exe windows:4 windows x86 arch:x86

1e4c0da5737da53aff5e6e0ab7de1efa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
ExitProcess
OpenMutexA
Process32First
Process32Next
Sleep
CreateToolhelp32Snapshot
CreateMutexA
CopyFileA
OpenFile
CloseHandle
FindClose
FindFirstFileA

advapi32

RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE