191b26388af105f582b5c4ce68515cd3 | Triage

Sharing

General

Target

191b26388af105f582b5c4ce68515cd3
Size

292KB
MD5

191b26388af105f582b5c4ce68515cd3
SHA1

2435eb61d06325155ee969b1c3df46cc38254aa8
SHA256

5a4d11afbdd539b5497842f9a3242c1bd58aab91bc4db5705b4021b587036ba4
SHA512

24ffd920ca857f7e88ae06f4dcdccc5cb9f178beec97dd8e74c1fa338c035f3b905014a0a541aa9244abd9396b9ba3107990bef90201277741c11169d77091e7
SSDEEP

6144:p3SuABw56nkP+6bpinkP+6bpPnkP+6bpinkP+6bpinkP+6bptdsVb5nkP+6bpI:p3SK5t+4+h+4+4+6sVW+b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
191b26388af105f582b5c4ce68515cd3

Files

191b26388af105f582b5c4ce68515cd3
.exe windows:4 windows x86 arch:x86

0ec36672953a1523cefaad89983456cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeExW
EnumResourceLanguagesA

user32

SetDlgItemTextA
DefWindowProcW

gdi32

AddFontResourceA
GetTextFaceA
GetMetaFileA
GetOutlineTextMetricsA

Sections

.icode
Size: - Virtual size: 161KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data?
Size: 1024B - Virtual size: 818B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.masm
Size: 512B - Virtual size: 357B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ