19d314eb8bb9e6d8e6e7c04b22df7c88

General

Target

19d314eb8bb9e6d8e6e7c04b22df7c88
Size

32KB
MD5

19d314eb8bb9e6d8e6e7c04b22df7c88
SHA1

28299881c9352989eb7efcd2990dd76c3626535b
SHA256

e2fbf3c5fb40b33be7df76072beb01e2e3ca1cbd767b4389f048d36ce137f19a
SHA512

07435dc6082459d94560dc3d6a61d7233215330b580ece3af8d91209d8ca98ac20b4a4a5a4004cc2d6d2978958d19bbff3927eed5f9bfe8a04c028ae3dc4312a
SSDEEP

384:L0Ysu+Djg1wfo2Jf+iX2F+U4cLuWzoW9xb8:hd+Pgu5f+imF+TcHLx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19d314eb8bb9e6d8e6e7c04b22df7c88

Files

19d314eb8bb9e6d8e6e7c04b22df7c88
.exe windows:4 windows x86 arch:x86

e4e848b4d16617b632860e662e459c05

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
ReleaseMutex
DeviceIoControl
CreateFileA
lstrcmpA
lstrcpyA
OpenMutexA
lstrlenA
GlobalAlloc
GetModuleHandleA
GetStartupInfoA
GetEnvironmentStrings
GetCommandLineA
GetVersion
RegisterServiceProcess
CloseHandle
UnhandledExceptionFilter
GetModuleFileNameA
GetACP
GetOEMCP
GetCPInfo
ord122
GetFileType
VirtualFree
VirtualAlloc
MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
GetLastError
CreateMutexA
ExitProcess
RtlUnwind
GetStdHandle

user32

MessageBoxA
KillTimer
SetTimer
PostQuitMessage
DefWindowProcA
RegisterClassA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

kaze/FAT
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e4e848b4d16617b632860e662e459c05

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 8KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 3KB

.idata Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 904B

.reloc Size: 4KB - Virtual size: 844B

kaze/FAT Size: 4KB - Virtual size: 2KB

.text
Size: 8KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 3KB

.idata
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 904B

.reloc
Size: 4KB - Virtual size: 844B

kaze/FAT
Size: 4KB - Virtual size: 2KB