19ca1bbfa052b7574130107e20dddbb0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19ca1bbfa052b7574130107e20dddbb0
Size

56KB
MD5

19ca1bbfa052b7574130107e20dddbb0
SHA1

7e9413295e76dcd039e40a7b31fce6d46a7d5763
SHA256

30fd3f52fedbe9bf755481ed50f8f23d0ad2d40a22be08eb6398c50fc8fbc23f
SHA512

5a21399a3c3eddbd9b31c9404c208630606a9532ce78e36135b73707e5cc0f7c91f3a5fece248b3cb67945a7f92ec2b86b79ca72615808ea88f3e54e95b8085f
SSDEEP

1536:Og6BZdpgo0dmk3+sGNn35+tBZ5jAVUTaFsamkAZ1en:d6DYevBNA/jAIOmkAZ1en

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19ca1bbfa052b7574130107e20dddbb0

Files

19ca1bbfa052b7574130107e20dddbb0
.exe windows:4 windows x86 arch:x86

ab3f5c32b4e37be10a93a2427255f0ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TermsrvAppInstallMode
EnumResourceTypesA
DeleteTimerQueue
LocalFree
SetConsoleDisplayMode
LCMapStringW
VirtualUnlock
SetConsoleWindowInfo
LocalFree
Module32FirstW
GetProfileIntA
LocalFileTimeToFileTime

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE