0219ac988b152dd8bb421ff6e9feb511 | Triage

Sharing

General

Target

0219ac988b152dd8bb421ff6e9feb511
Size

62KB
MD5

0219ac988b152dd8bb421ff6e9feb511
SHA1

abbafbead30e9628c2c2ae3c1cdc623b6b815cd7
SHA256

8e711d34060279299d54221f427aef0d281a0327852ba346c01626cefa61be61
SHA512

a63aab1815b8613cc5843ca3505104f9f1bd68ac9367386cd7ef139be39ca7b4dac7f8b5da51f6490ec62e5a3db19dbe1bb46cf19eb420cfa583da608ffb630d
SSDEEP

1536:n+dd6GHue2/3zKOhxI7hSu64vGpHcr9Vb37v4/nagyJ:nuBFeGObIVfvmm37v4/n0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0219ac988b152dd8bb421ff6e9feb511

Files

0219ac988b152dd8bb421ff6e9feb511
.exe windows:5 windows x86 arch:x86

48d37b42b1c9ac41201c8bfdd8608ddb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
ReadFile
SetConsoleTextAttribute
VirtualProtectEx
ExitProcess

user32

GetTopWindow
MessageBoxA
SendMessageA

Sections

CODE
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tdata
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bcyhhq
Size: 54KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ