191a763b7f833f5036095d6acb5a9d6c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

191a763b7f833f5036095d6acb5a9d6c
Size

1.1MB
MD5

191a763b7f833f5036095d6acb5a9d6c
SHA1

ca1cce5d0eee9700fee0b37009fbd27d9f642e57
SHA256

e173926f54e9a3c4bd2c0daf93e25b5e41dfc559d31d0068bfaaffd785fa3f9f
SHA512

fdd9dd5ca5d6b8327fd8d43dd7a73fc622495b0eb9ebb40245e005b6c862100935b7355aae630b67420562b4ddd663be3d201b9449ed0f1c39ffef07c8628baf
SSDEEP

24576:HgPLQLzDzTx+IBkZTJ/5HUnZdfjtQePGszgSuRCItBa1y9QAgEL3Kw:kLukGUx4QVFR9EY9QAgQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
191a763b7f833f5036095d6acb5a9d6c

Files

191a763b7f833f5036095d6acb5a9d6c
.exe windows:0 windows x86 arch:x86

cf3decc284a86dcff19080d7b93890b1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetCurrentThreadId
GetHandleInformation
GetLocalTime
WaitForSingleObject
CloseHandle
VirtualFree
MapViewOfFile
OpenThread
CreateEventA
VirtualAlloc
CreateFileMappingA
UnmapViewOfFile
ExitProcess

Sections

.text
Size: 1018KB - Virtual size: 1018KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ