1924289714249157de18d621c625f23d | Triage

Sharing

General

Target

1924289714249157de18d621c625f23d
Size

96KB
MD5

1924289714249157de18d621c625f23d
SHA1

eca0cedbf6a1dedb9733618e343b45c08edd9386
SHA256

5d68e54bdfc75e3dc4a24b675d676c85c62b10f835af863d3f65afd2872d0d96
SHA512

e6ef6d5d93dc23d01761ff833832b59668eef9e6eaa2592be5cc1294966b5b3db593609f7cf79c0e4f1689ee9767f3e21183df02104a984180ac88da94e592ec
SSDEEP

1536:OhUYd4hXKeuMqmL4xC0JvjJ/wP17y4kwVTXZOM9E5kvCNy1j1bkO4QfFq0/B3N71:Oj4hawqmLqCSjRwtW4k8TXZOM9E56CN6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1924289714249157de18d621c625f23d

Files

1924289714249157de18d621c625f23d
.exe windows:4 windows x86 arch:x86

14546693be9d28fe651908fca7286b40

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
ReadFile
CreateProcessA
MultiByteToWideChar
IsBadReadPtr
GetModuleFileNameA
GetModuleHandleA
DeleteFileA
GetWindowsDirectoryA
SetFilePointer

ole32

OleCreate

user32

GetSystemMetrics
GetWindowLongA
DispatchMessageA
GetMessageA
DestroyWindow
TranslateMessage
DefWindowProcA
MessageBoxA
PostQuitMessage

advapi32

RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA

shell32

SHGetPathFromIDListA

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 914B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ