1900fe0b7f74c88a2c3ec586ce00b44f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1900fe0b7f74c88a2c3ec586ce00b44f
Size

4KB
MD5

1900fe0b7f74c88a2c3ec586ce00b44f
SHA1

9137479ae8f8db13f609c3e19a8a23a1ef0af727
SHA256

e86cb76d4511001d7993ced8d2bc1cc449d44a5f21061587a858440e6b0b2768
SHA512

e0a1ed9b5d2b08d77a1c57a9148ab2f2f5139b22c90810e5b6172decdc77244fe1c374c034a4cca464bd449e0bfdc54c3802f13fd1f4faa35cc48d5170b79605
SSDEEP

48:Sn22IQxyDDHargBlT9YMIZWitWpGy5WwGh3gyhrkRuzBZklv:PQUbTlEWHpGyWwJGAUW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1900fe0b7f74c88a2c3ec586ce00b44f

Files

1900fe0b7f74c88a2c3ec586ce00b44f
.exe windows:5 windows x86 arch:x86

f4bb95a2ed29767e199a8a83e34ea89d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
ExitProcess
GetModuleHandleW
GetStartupInfoW
GetCommandLineW

user32

FindWindowW
PostMessageW

shell32

SHLoadInProc

Sections

.text
Size: 1024B - Virtual size: 742B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE